tun模式下 没有ip规则 仍然会有dns解析请求

[iKun10001]

tun: enable: true stack: system dns-hijack: - 'any:53' auto-route: true auto-detect-interface: true

dns: enable: true prefer-h3: false ipv6: false enhanced-mode: fake-ip fake-ip-range: 28.0.0.1/8 fake-ip-filter: - '+.lan' - "+.163.com" - "+.126.net" default-nameserver: - 'quic://223.5.5.5:853' nameserver: - https://doh.apad.pro/dns-query proxy-server-nameserver: - 'quic://223.5.5.5:853'

sub-rules: rule1:

• OR,((DOMAIN-KEYWORD,bili),(DOMAIN-KEYWORD,hdslb)),DIRECT
• OR,((DOMAIN-KEYWORD,123pan),(DOMAIN-KEYWORD,cjjd)),DIRECT
• OR,((DOMAIN-KEYWORD,163.com),(DOMAIN-KEYWORD,126.net)),DIRECT
• OR,((DOMAIN-KEYWORD,weibo),(DOMAIN-KEYWORD,sinaimg)),DIRECT
• OR,((DOMAIN-KEYWORD,lanzou),(DOMAIN-KEYWORD,woozooo)),DIRECT
• MATCH,节点选择

rules:

• PROCESS-NAME,clashmeta.exe,DIRECT
• SUB-RULE,(PROCESS-NAME,waterfox.exe),rule1

- PROCESS-NAME,waterfox.exe,节点选择

• PROCESS-NAME,TSClient.exe,专线
• PROCESS-NAME,APPServerClient.exe,专线
• PROCESS-NAME,Telegram.exe,TG,no-resolve
• IN-TYPE,INNER,专线 #providers 更新入站
• MATCH,DIRECT

日志 23-09-18 15:26:06[ debug ][DNS] e64qkbbrovp2zjb3rvic30fk2euh26hqbu6e3uam-2.ipleak.net --> [95.85.16.212], from https://doh.apad.pro:443/dns-query 23-09-18 15:26:06[ debug ][DNS] resolve e64qkbbrovp2zjb3rvic30fk2euh26hqbu6e3uam-2.ipleak.net from https://doh.apad.pro:443/dns-query

这两条不应该命中

• SUB-RULE,(PROCESS-NAME,waterfox.exe),rule1

直接远程解析么 大佬 求解惑

我想通过tun模式 代理 几个进程 其他进程直连 应该怎么做呢 并且不对代理进程的域名进行解析