# 内网与保留地址 → DIRECT（behavior: ipcidr，规则里加 no-resolve）
payload:
  - '10.0.0.0/8'
  - '172.16.0.0/12'
  - '192.168.0.0/16'      # 办公网 192.168.10/11/20.x、VPN 192.168.110.x
  - '100.64.0.0/10'       # CGNAT / tailscale
  - '127.0.0.0/8'
  - '169.254.0.0/16'
  - '224.0.0.0/4'
  - '255.255.255.255/32'
  - '::1/128'
  - 'fc00::/7'
  - 'fe80::/10'