104 lines
2.5 KiB
YAML
104 lines
2.5 KiB
YAML
# MikroTik Address List 插件配置示例
|
|
|
|
# 插件定义
|
|
plugins:
|
|
# 转发插件 - 向上游 DNS 服务器查询
|
|
- tag: forward_google
|
|
type: forward
|
|
args:
|
|
upstream:
|
|
- addr: "8.8.8.8:53"
|
|
- addr: "8.8.4.4:53"
|
|
|
|
# MikroTik Address List 插件 - 将解析的 IP 添加到 MikroTik
|
|
- tag: mikrotik_blocklist
|
|
type: mikrotik_addresslist
|
|
args: "192.168.1.1:8728:admin:password:false:10:blocked_ips:blocked_ips6:24:32:blocked_domain:86400"
|
|
|
|
# 序列插件 - 组合多个插件
|
|
- tag: sequence_with_blocklist
|
|
type: sequence
|
|
args:
|
|
- exec: forward_google
|
|
- exec: mikrotik_blocklist
|
|
|
|
# 服务器配置
|
|
servers:
|
|
# UDP 服务器
|
|
- exec: sequence_with_blocklist
|
|
args:
|
|
- sequence_with_blocklist
|
|
listeners:
|
|
- protocol: udp
|
|
addr: ":53"
|
|
|
|
# TCP 服务器
|
|
- exec: sequence_with_blocklist
|
|
args:
|
|
- sequence_with_blocklist
|
|
listeners:
|
|
- protocol: tcp
|
|
addr: ":53"
|
|
|
|
# 日志配置
|
|
log:
|
|
level: info
|
|
file: "mosdns.log"
|
|
|
|
# 其他配置示例
|
|
|
|
# 1. 使用 YAML 格式的详细配置
|
|
plugins:
|
|
- tag: mikrotik_detailed
|
|
type: mikrotik_addresslist
|
|
args:
|
|
host: "192.168.1.1"
|
|
port: 8728
|
|
username: "admin"
|
|
password: "password"
|
|
use_tls: false
|
|
timeout: 10
|
|
address_list4: "blocked_ips"
|
|
address_list6: "blocked_ips6"
|
|
mask4: 24
|
|
mask6: 32
|
|
comment: "blocked_domain"
|
|
timeout_addr: 86400
|
|
|
|
# 2. 多个 address list 配置
|
|
plugins:
|
|
# 恶意域名列表
|
|
- tag: mikrotik_malware
|
|
type: mikrotik_addresslist
|
|
args: "192.168.1.1:8728:admin:password:false:10:malware_ips:malware_ips6:24:32:malware:3600"
|
|
|
|
# 广告域名列表
|
|
- tag: mikrotik_ads
|
|
type: mikrotik_addresslist
|
|
args: "192.168.1.1:8728:admin:password:false:10:ads_ips:ads_ips6:24:32:ads:7200"
|
|
|
|
# 组合序列
|
|
- tag: sequence_all
|
|
type: sequence
|
|
args:
|
|
- exec: forward_google
|
|
- exec: mikrotik_malware
|
|
- exec: mikrotik_ads
|
|
|
|
# 3. 使用 TLS 的安全配置
|
|
plugins:
|
|
- tag: mikrotik_secure
|
|
type: mikrotik_addresslist
|
|
args: "192.168.1.1:8729:admin:password:true:15:secure_list:secure_list6:24:32:secure:1800"
|
|
|
|
# 4. 不同掩码配置
|
|
plugins:
|
|
# 精确 IP 匹配
|
|
- tag: mikrotik_exact
|
|
type: mikrotik_addresslist
|
|
args: "192.168.1.1:8728:admin:password:false:10:exact_ips:exact_ips6:32:128:exact:3600"
|
|
|
|
# 网段匹配
|
|
- tag: mikrotik_network
|
|
type: mikrotik_addresslist
|
|
args: "192.168.1.1:8728:admin:password:false:10:network_ips:network_ips6:16:48:network:7200" |