diff --git a/clash_base.yaml b/clash_base.yaml
index c4637c9..3647890 100644
--- a/clash_base.yaml
+++ b/clash_base.yaml
@@ -1,20 +1,40 @@
-mixed-port: 7890
-allow-lan: true
-bind-address: '*'
-mode: rule
-log-level: info
-external-controller: '127.0.0.1:9090'
-
-dns:
-  enable: true
-  listen: '127.0.0.1:9053'
-  default-nameserver:
-    - 223.5.5.5
-    - 223.6.6.6
-    - 119.29.29.29
-  enhanced-mode: fake-ip
-  fake-ip-range: 198.18.0.1/16
-  nameserver:
-    - 'https://223.5.5.5/dns-query'
-    - 'https://223.6.6.6/dns-query'
-    - 'https://doh.pub/dns-query'
+mixed-port: 7890
+allow-lan: true
+bind-address: '*'
+mode: rule
+log-level: info
+external-controller: '127.0.0.1:9090'
+
+sniffer:
+  enable: true
+  override-destination: true
+  sniff:
+    HTTP:
+      ports: [80, 8080-8880]
+      override-destination: true
+    TLS:
+      ports: [443, 8443]
+    QUIC:
+      ports: [443, 8443]
+  skip-domain:
+    - 'Mijia Cloud'
+    - '+.push.apple.com'
+
+dns:
+  enable: true
+  listen: '127.0.0.1:9053'
+  ipv6: false
+  enhanced-mode: redir-host
+  default-nameserver:
+    - 223.5.5.5
+    - 119.29.29.29
+  nameserver:
+    - 'https://223.5.5.5/dns-query'
+    - 'https://doh.pub/dns-query'
+  proxy-server-nameserver:
+    - 'https://1.1.1.1/dns-query'
+    - 'https://8.8.8.8/dns-query'
+  nameserver-policy:
+    'geosite:cn,private':
+      - 'https://223.5.5.5/dns-query'
+      - 'https://doh.pub/dns-query'