diff --git a/package/ctcgfw/luci-app-openclash/Makefile b/package/ctcgfw/luci-app-openclash/Makefile
index e473474f85..35f5d5f760 100644
--- a/package/ctcgfw/luci-app-openclash/Makefile
+++ b/package/ctcgfw/luci-app-openclash/Makefile
@@ -1,7 +1,7 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=luci-app-openclash
-PKG_VERSION:=0.40.7
+PKG_VERSION:=0.40.10
 PKG_RELEASE:=beta
 PKG_MAINTAINER:=vernesong <https://github.com/vernesong/OpenClash>
 
@@ -9,12 +9,16 @@ PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)
 
 include $(INCLUDE_DIR)/package.mk
 
+define Package/$(PKG_NAME)/config
+	select PACKAGE_libcap-bin
+endef
+
 define Package/$(PKG_NAME)
 	CATEGORY:=LuCI
 	SUBMENU:=3. Applications
 	TITLE:=LuCI support for clash
 	PKGARCH:=all
-	DEPENDS:=+iptables +dnsmasq-full +coreutils +coreutils-nohup +bash +curl +jsonfilter +ca-certificates +ipset +ip-full +iptables-mod-tproxy
+	DEPENDS:=+iptables +dnsmasq-full +coreutils +coreutils-nohup +bash +curl +jsonfilter +ca-certificates +ipset +ip-full +iptables-mod-tproxy +iptables-mod-extra +libcap
 	MAINTAINER:=vernesong
 endef
 
@@ -95,4 +99,4 @@ define Package/$(PKG_NAME)/install
 	$(CP) $(PKG_BUILD_DIR)/luasrc/* $(1)/usr/lib/lua/luci/
 endef
 
-$(eval $(call BuildPackage,$(PKG_NAME)))
+$(eval $(call BuildPackage,$(PKG_NAME)))
\ No newline at end of file
diff --git a/package/ctcgfw/luci-app-openclash/luasrc/model/cbi/openclash/servers-config.lua b/package/ctcgfw/luci-app-openclash/luasrc/model/cbi/openclash/servers-config.lua
index e5ae9f222d..1d00d0448f 100644
--- a/package/ctcgfw/luci-app-openclash/luasrc/model/cbi/openclash/servers-config.lua
+++ b/package/ctcgfw/luci-app-openclash/luasrc/model/cbi/openclash/servers-config.lua
@@ -261,7 +261,7 @@ o:depends("type", "http")
 o:depends("type", "trojan")
 
 -- [[ TLS ]]--
-o = s:option(ListValue, "tls", translate("TLS"))
+o = s:option(ListValue, "tls", translate("tls"))
 o.rmempty = true
 o.default = "false"
 o:value("true")
@@ -273,8 +273,9 @@ o:depends("obfs_vmess", "http")
 o:depends("type", "socks5")
 o:depends("type", "http")
 
-o = s:option(Value, "servername", translate("TLS Custom Host"))
+o = s:option(Value, "servername", translate("sni"))
 o.rmempty = true
+o.datatype = "host"
 o.placeholder = translate("example.com")
 o:depends("obfs_vmess", "websocket")
 
@@ -285,18 +286,6 @@ o:value("true")
 o:value("false")
 o:depends("obfs_vmess", "http")
 
--- 验证用户名
-o = s:option(Value, "auth_name", translate("Auth Username"))
-o:depends("type", "socks5")
-o:depends("type", "http")
-o.rmempty = true
-
--- 验证密码
-o = s:option(Value, "auth_pass", translate("Auth Password"))
-o:depends("type", "socks5")
-o:depends("type", "http")
-o.rmempty = true
-
 -- [[ MUX ]]--
 o = s:option(ListValue, "mux", translate("mux"))
 o.rmempty = true
@@ -311,6 +300,19 @@ o.datatype = "host"
 o.placeholder = translate("example.com")
 o.rmempty = true
 o:depends("type", "trojan")
+o:depends("type", "http")
+
+-- 验证用户名
+o = s:option(Value, "auth_name", translate("Auth Username"))
+o:depends("type", "socks5")
+o:depends("type", "http")
+o.rmempty = true
+
+-- 验证密码
+o = s:option(Value, "auth_pass", translate("Auth Password"))
+o:depends("type", "socks5")
+o:depends("type", "http")
+o.rmempty = true
 
 -- [[ alpn ]]--
 o = s:option(DynamicList, "alpn", translate("alpn"))
diff --git a/package/ctcgfw/luci-app-openclash/po/zh-cn/openclash.zh-cn.po b/package/ctcgfw/luci-app-openclash/po/zh-cn/openclash.zh-cn.po
index f37b35cc53..ccd9219aeb 100644
--- a/package/ctcgfw/luci-app-openclash/po/zh-cn/openclash.zh-cn.po
+++ b/package/ctcgfw/luci-app-openclash/po/zh-cn/openclash.zh-cn.po
@@ -132,7 +132,7 @@ msgid "fake-ip-mix(tun mix mode)"
 msgstr "Fake-IP（TUN-混合）模式【依赖kmod-tun】【UDP-TUN，TCP-转发】"
 
 msgid "Select Mode For OpenClash Work, Try Flush DNS Cache If Network Error"
-msgstr "选择运行模式，Redir-Host模式下无法代理路由器自身流量，如客户端的网络异常请尝试清除DNS缓存"
+msgstr "选择运行模式，如客户端的网络异常请尝试清除DNS缓存"
 
 msgid "Proxy Mode"
 msgstr "*代理模式"
diff --git a/package/ctcgfw/luci-app-openclash/root/etc/init.d/openclash b/package/ctcgfw/luci-app-openclash/root/etc/init.d/openclash
index 51b156f1aa..83fce9a85d 100644
--- a/package/ctcgfw/luci-app-openclash/root/etc/init.d/openclash
+++ b/package/ctcgfw/luci-app-openclash/root/etc/init.d/openclash
@@ -94,13 +94,15 @@ revert_dns() {
       uci delete dhcp.@dnsmasq[0].cachesize >/dev/null 2>&1
    }
    
-   if [ -s "/tmp/resolv.conf.d/resolv.conf.auto" ]; then
-      uci set dhcp.@dnsmasq[0].resolvfile=/tmp/resolv.conf.d/resolv.conf.auto >/dev/null 2>&1
-   elif [ -s "/tmp/resolv.conf.auto" ]; then
-      uci set dhcp.@dnsmasq[0].resolvfile=/tmp/resolv.conf.auto >/dev/null 2>&1
-   fi
-   uci set dhcp.@dnsmasq[0].noresolv=0 >/dev/null 2>&1
-
+   [ "$1" -eq 1 ] && {
+      if [ -s "/tmp/resolv.conf.d/resolv.conf.auto" ]; then
+         uci set dhcp.@dnsmasq[0].resolvfile=/tmp/resolv.conf.d/resolv.conf.auto >/dev/null 2>&1
+      elif [ -s "/tmp/resolv.conf.auto" ]; then
+         uci set dhcp.@dnsmasq[0].resolvfile=/tmp/resolv.conf.auto >/dev/null 2>&1
+      fi
+      uci set dhcp.@dnsmasq[0].noresolv=0 >/dev/null 2>&1
+   }
+   
    uci commit dhcp
    uci commit openclash
    rm -rf /tmp/dnsmasq.d/dnsmasq_openclash.conf >/dev/null 2>&1
@@ -137,16 +139,7 @@ cat "$CHANGE_FILE" "$DNS_FILE" "$PROXY_PROVIDER_FILE" "$PROXY_FILE" "$GROUP_FILE
 
 yml_check()
 {
-   #格式替换
-   sed -i 's/\t/ /g' "$3" 2>/dev/null
-   sed -i "s/- \{2,\}/- /g" "$3" 2>/dev/null
-   sed -i "s/^\.\.\.$//g" "$3" 2>/dev/null
-   sed -i "s/^---$//g" "$3" 2>/dev/null
-   sed -i "s/^ \{1,\}dns:/dns:/g" "$3" 2>/dev/null
-
-   #检查关键字避免后续操作出错
-   /usr/share/openclash/yml_field_name_ch.sh "$3" 2>/dev/null
-
+	
    #创建启动备份
    cp "$3" "$5"
    
@@ -154,6 +147,17 @@ yml_check()
    if [ ! -f "$4" ]; then
       cp "$3" "$4"
    fi
+   
+   #格式替换
+   sed -i 's/\t/ /g' "$3" 2>/dev/null
+   sed -i "s/- \{2,\}/- /g" "$3" 2>/dev/null
+   sed -i "s/^\.\.\.$//g" "$3" 2>/dev/null
+   sed -i "s/^---$//g" "$3" 2>/dev/null
+   sed -i "s/^ \{1,\}dns:/dns:/g" "$3" 2>/dev/null
+   sed -i '/OpenClash-General/d' "$3" 2>/dev/null
+
+   #检查关键字避免后续操作出错
+   /usr/share/openclash/yml_field_name_ch.sh "$3" 2>/dev/null
 
    #取出general部分
    /usr/share/openclash/yml_field_cut.sh "general" "$CHANGE_FILE" "$3"
@@ -162,6 +166,11 @@ yml_check()
    nameserver_len=$(sed -n '/^ \{0,\}nameserver:/=' "$3" 2>/dev/null)
    if [ -n "$nameserver_len" ]; then
       /usr/share/openclash/yml_field_cut.sh "$nameserver_len" "$DNS_FILE" "$3"
+   else
+      fallback_len=$(sed -n '/^ \{0,\}fallback:/=' "$3" 2>/dev/null)
+      if [ -n "$fallback_len" ]; then
+   	     /usr/share/openclash/yml_field_cut.sh "$fallback_len" "$DNS_FILE" "$3"
+   	  fi
    fi 2>/dev/null
    
    #取出proxy部分
@@ -243,65 +252,10 @@ yml_check()
       /usr/share/openclash/yml_field_cut.sh "$rule_bak_len" "$RULE_BAK_FILE" "$4"
    fi 2>/dev/null
    
-   #自定义DNS还原
-   if [ "$(grep -c '##Custom DNS##' "$CHANGE_FILE")" -gt 0 ] || [ "$(grep -c '##Custom DNS##' "$DNS_FILE")" -gt 0 ]; then
-      if [ "$2" = 0 ] && [ -f "$4" ]; then
-         #取出dns备份
-         nameserver_len=$(sed -n '/^ \{0,\}nameserver:/=' "$4" 2>/dev/null)
-         if [ -n "$nameserver_len" ]; then
-            /usr/share/openclash/yml_field_cut.sh "$nameserver_len" "/tmp/backdns.config" "$4" "dns"
-         fi 2>/dev/null
-         sed -i '/^ \{0,\}nameserver:/,$d' "$DNS_FILE" 2>/dev/null
-         sed -i '/##Custom DNS##/d' "$CHANGE_FILE" 2>/dev/null
-         cat "/tmp/backdns.config" >> "$DNS_FILE"
-         rm -rf /tmp/backdns.config 2>/dev/null
-      fi
-   fi 2>/dev/null
-
-}
-
-#检查DNS设置
-yml_dns_check()
-{
-
+   #检查DNS字段
    if [ -z "$(grep '^dns:' "$CHANGE_FILE")" ]; then
       echo "dns:" >> "$CHANGE_FILE" 2>/dev/null
    fi
-
-   if [ -z "$(grep '^ \{0,\}nameserver:' "$DNS_FILE")" ]; then
-      echo "  nameserver:" > "$DNS_FILE" 2>/dev/null
-      cat >> "$DNS_FILE" <<-EOF
-  - 114.114.114.114
-  - 119.29.29.29
-  fallback:
-  - https://cloudflare-dns.com/dns-query
-  - https://dns.google/dns-query
-  - https://1.1.1.1/dns-query
-  - tls://8.8.8.8:853
-EOF
-   fi
-
-   dns_port=$(grep "^ \{0,\}listen:" "$CHANGE_FILE" |awk -F ':' '{print $3}' |awk -F '#' '{print $1}' |tr -cd "[0-9]" 2>/dev/null)
-   if [ -z "$dns_port" ] || [ "$dns_port" -eq 53 ]; then
-      dns_port=7874
-   fi
-
-   if [ -n "$(grep "^ \{0,\}listen:" "$CHANGE_FILE")" ]; then
-      if [ "$ipv6_enable" != "1" ]; then
-         sed -i "/^ \{0,\}listen:/c\  listen: 127.0.0.1:${dns_port}" "$CHANGE_FILE" 2>/dev/null
-      else
-         sed -i "/^ \{0,\}listen:/c\  listen: 0.0.0.0:${dns_port}" "$CHANGE_FILE" 2>/dev/null
-      fi
-   else
-      if [ "$ipv6_enable" != "1" ]; then
-         sed -i "/^dns:/a\  listen: 127.0.0.1:${dns_port}" "$CHANGE_FILE" 2>/dev/null
-      else
-         sed -i "/^dns:/a\  listen: 0.0.0.0:${dns_port}" "$CHANGE_FILE" 2>/dev/null
-      fi
-   fi 2>/dev/null
-   
-   #保存DNS端口方便后续调用
-   uci set openclash.config.dns_port="$dns_port" && uci commit openclash
    
    #检查general部分的缩进
    if [ -n "$(grep "^ \{1,\}port:" "$CHANGE_FILE")" ] || [ -n "$(grep "^ \{1,\}mode:" "$CHANGE_FILE")" ] || [ -n "$(grep "^ \{1,\}log-level:" "$CHANGE_FILE")" ]; then
@@ -311,10 +265,53 @@ EOF
       sed -n '/^dns:/,$p' "$CHANGE_FILE" >> /tmp/config.check 2>/dev/null
       mv /tmp/config.check "$CHANGE_FILE" 2>/dev/null
    fi
+   
+   #自定义DNS还原
+   if [ "$(grep -c '##Custom DNS##' "$CHANGE_FILE")" -gt 0 ] || [ "$(grep -c '##Custom DNS##' "$DNS_FILE")" -gt 0 ]; then
+      if [ "$2" = 0 ] && [ -f "$4" ]; then
+         #取出dns备份
+         nameserver_len=$(sed -n '/^ \{0,\}nameserver:/=' "$4" 2>/dev/null)
+         if [ -n "$nameserver_len" ]; then
+            /usr/share/openclash/yml_field_cut.sh "$nameserver_len" "/tmp/backdns.config" "$4"
+         else
+            fallback_len=$(sed -n '/^ \{0,\}fallback:/=' "$3" 2>/dev/null)
+            if [ -n "$fallback_len" ]; then
+               /usr/share/openclash/yml_field_cut.sh "$fallback_len" "/tmp/backdns.config" "$4"
+            fi
+         fi 2>/dev/null
+         rm -rf "$DNS_FILE" 2>/dev/null
+         rm -rf "$FALLBACK_FILTER_FILE" 2>/dev/null
+         sed -i '/##Custom DNS##/d' "$CHANGE_FILE" 2>/dev/null
+         cat "/tmp/backdns.config" >> "$DNS_FILE" 2>/dev/null
+         rm -rf /tmp/backdns.config 2>/dev/null
+      fi
+   fi 2>/dev/null
+   #检查DNS服务
+   if [ -z "$(grep '^ \{0,\}nameserver:' "$DNS_FILE")" ] || [ -z "$(sed '/^ \{0,\}fallback/,$d' "$DNS_FILE" 2>/dev/null |grep '^ \{0,\}- ')" ]; then
+      echo "检测到DNS选项下的Nameserver未设置服务器，开始补全..." >$START_LOG
+      echo "${LOGTIME} Nameserver Option Must Be Setted, Auto Completed" >>$LOG_FILE
+      echo "  nameserver:" > "$DNS_FILE" 2>/dev/null
+      cat >> "$DNS_FILE" <<-EOF
+    - 114.114.114.114
+    - 119.29.29.29
+  fallback:
+    - https://cloudflare-dns.com/dns-query
+    - https://dns.google/dns-query
+    - https://1.1.1.1/dns-query
+    - tls://8.8.8.8:853
+EOF
+   sleep 2
+   fi
+  
+   dns_port=$(grep "^ \{0,\}listen:" "$CHANGE_FILE" |awk -F ':' '{print $3}' |awk -F '#' '{print $1}' |tr -cd "[0-9]" 2>/dev/null)
+   if [ -z "$dns_port" ] || [ "$dns_port" -eq 53 ]; then
+      dns_port=7874
+   fi
 
+   #保存DNS端口方便后续调用
+   uci set openclash.config.dns_port="$dns_port" && uci commit openclash
+   
    #添加标识
-   sed -i '/OpenClash-General/d' "$DNS_FILE" 2>/dev/null
-   sed -i '/OpenClash-General/d' "$FALLBACK_FILTER_FILE" 2>/dev/null
    echo '#===================== OpenClash-General-Settings =====================#' >> "$FALLBACK_FILTER_FILE" 2>/dev/null
 }
 
@@ -398,10 +395,10 @@ fi
 if [ -z "$(pidof clash)" ] && [ "$provider_path_exist" = 0 ]; then
    if [ "$2" = "proxy_provider" ]; then
       echo "错误: 代理集文件下载失败，请到日志页面查看详细错误信息！" >$START_LOG
-      echo "${LOGTIME} Faild to Download Proxy-Provider File, Please Check The Error Info And Try Again" >> $LOG_FILE
+      echo "${LOGTIME} Error: Faild to Download Proxy-Provider File, Please Check The Error Info And Try Again" >> $LOG_FILE
    else
       echo "错误: 规则集文件下载失败，请到日志页面查看详细错误信息！" >$START_LOG
-      echo "${LOGTIME} Faild to Download Rule-Provider File, Please Check The Error Info And Try Again" >> $LOG_FILE
+      echo "${LOGTIME} Error: Faild to Download Rule-Provider File, Please Check The Error Info And Try Again" >> $LOG_FILE
    fi
    sleep 10
    start_fail
@@ -452,12 +449,15 @@ yml_dns_get()
 
    if [ -n "$group" ]; then
       if [ "$group" = "nameserver" ]; then
-         echo "  $dns_type$dns_address" >>/tmp/config.namedns
+      	 if [ -z "$(grep "nameserver:$" /tmp/config.namedns 2>/dev/null)" ]; then
+            echo "  nameserver:" >/tmp/config.namedns
+         fi
+         echo "    $dns_type$dns_address" >>/tmp/config.namedns
       else
          if [ -z "$(grep "fallback:$" /tmp/config.falldns 2>/dev/null)" ]; then
             echo "  fallback:" >/tmp/config.falldns
          fi
-         echo "  $dns_type$dns_address" >>/tmp/config.falldns
+         echo "    $dns_type$dns_address" >>/tmp/config.falldns
       fi
    else
       return
@@ -468,18 +468,26 @@ yml_dns_get()
 yml_dns_custom()
 {
    if [ "$1" = 1 ]; then
-      echo "  nameserver:" >/tmp/config.namedns
-      echo "##Custom DNS##" >> /tmp/config.namedns 2>/dev/null
       config_load "openclash"
       config_foreach yml_dns_get "dns_servers"
-      sed -i '/^ \{0,\}nameserver:/,$d' "$2" 2>/dev/null
-      cat "/tmp/config.namedns" >> "$2" 2>/dev/null
-      cat "/tmp/config.falldns" >> "$2" 2>/dev/null
+      if [ -f "/tmp/config.namedns" ]; then
+         sed -i '/^ \{0,\}nameserver:/,$d' "$2" 2>/dev/null
+         sed -i "/^ \{0,\}nameserver:/a\##Custom DNS##" "/tmp/config.namedns"
+         cat "/tmp/config.namedns" >> "$2" 2>/dev/null
+         cat "/tmp/config.falldns" >> "$2" 2>/dev/null
+      else
+         echo "错误: 配置文件DNS选项下的Nameserver必须设置服务器，已停止设置自定义DNS服务器！" >$START_LOG
+         echo "${LOGTIME} Error: Nameserver Option Must Be Setted, Stop Customing DNS Servers" >>$LOG_FILE
+         sleep 3
+      fi
       rm -rf /tmp/config.namedns 2>/dev/null
       rm -rf /tmp/config.falldns 2>/dev/null
-   elif [ -z "$(grep "##Custom DNS##" "$2" 2>/dev/null)" ]; then
+   fi
+   
+   if [ -z "$(grep "##Custom DNS##" "$2" 2>/dev/null)" ]; then
       sed -i "/^ \{0,\}nameserver:/c\  nameserver:" "$2" 2>/dev/null
       sed -i "/^ \{0,\}fallback:/c\  fallback:" "$2" 2>/dev/null
+      sed -i "s/^ \{0,\}- /    - /g" "$2" 2>/dev/null
    fi
 
 #fallback-filter
@@ -518,7 +526,7 @@ EOF
          sed -i "/ipcidr:/c\    ipcidr:" "$3" 2>/dev/null
       fi
       if [ -z "$(grep "^      - " "$3")" ]; then
-         sed -i '/^ \{0,\}ipcidr:/,/OpenClash-General-Settings/ {s/^ \{0,\}- /      - /}' "$3" 2>/dev/null #修改参数空格
+         sed -i '/^ \{0,\}ipcidr:/,/,$/ {s/^ \{0,\}- /      - /g}' "$3" 2>/dev/null #修改参数空格
       fi
    fi
 
@@ -555,9 +563,7 @@ yml_auth_custom()
    if [ -f /tmp/config.auth ]; then
       sed -i '/^dns:/i\authentication:' "$1" 2>/dev/null
       sed -i '/^authentication:/r/tmp/config.auth' "$1" 2>/dev/null
-      mv /tmp/config.auth /tmp/openclash.auth 2>/dev/null
-   else
-      rm -rf /tmp/openclash.auth 2>/dev/null
+      rm -rf /tmp/config.auth 2>/dev/null
    fi
 }
 
@@ -940,7 +946,7 @@ if [ ! -f "$CONFIG_FILE" ]; then
       exit 0
    elif [ ! -f "$CONFIG_FILE" ]; then
       echo "错误: 缺少配置文件，请上传或更新配置文件！" >$START_LOG
-      echo "${LOGTIME} Config Not Found" >> $LOG_FILE
+      echo "${LOGTIME} Error: Config Not Found" >> $LOG_FILE
       sleep 5
       exit 0
    fi
@@ -988,14 +994,14 @@ do_run_file()
 
    if [ "$small_flash_memory" != "1" ]; then
       dev_core_path="/etc/openclash/core/clash"
-   	  tun_core_path="/etc/openclash/core/clash_tun"
-   	  game_core_path="/etc/openclash/core/clash_game"
-   	  geoip_path="/etc/openclash/Country.mmdb"
+      tun_core_path="/etc/openclash/core/clash_tun"
+      game_core_path="/etc/openclash/core/clash_game"
+      geoip_path="/etc/openclash/Country.mmdb"
    else
       dev_core_path="/tmp/etc/openclash/core/clash"
-   	  tun_core_path="/tmp/etc/openclash/core/clash_tun"
-   	  game_core_path="/tmp/etc/openclash/core/clash_game"
-   	  geoip_path="/tmp/etc/openclash/Country.mmdb"
+      tun_core_path="/tmp/etc/openclash/core/clash_tun"
+      game_core_path="/tmp/etc/openclash/core/clash_game"
+      geoip_path="/tmp/etc/openclash/Country.mmdb"
    fi
     
    rm -rf "/etc/openclash/clash" 2>/dev/null
@@ -1045,7 +1051,7 @@ do_run_file()
    [ ! -x "$dev_core_path" ] && chmod 4755 "$dev_core_path" 2>/dev/null
    
    [ -f "$geoip_path" ] && [ "$small_flash_memory" = "1" ] && {
-   	  rm -rf "/etc/openclash/Country.mmdb" 2>/dev/null
+      rm -rf "/etc/openclash/Country.mmdb" 2>/dev/null
       ln -s "$geoip_path" /etc/openclash/Country.mmdb 2>/dev/null
    }
    
@@ -1065,6 +1071,17 @@ do_run_file()
      nohup /usr/share/openclash/openclash_core.sh "$core_type" &
      exit 0
    }
+   
+   if ! capsh --is-uid=0 >/dev/null; then
+     echo "错误：Capsh异常，请尝试重新安装依赖【libcap】和相应的Capsh库，终止启动..." >$START_LOG
+     echo "${LOGTIME} Error: Could Not Load The Capsh Library, Please Verify The Capsh Shell Library Work Well" >> $LOG_FILE
+     echo "${LOGTIME} Tip: You Could Download And Re-Install The libcap & libcap-bin Library From The Address Below:" >> $LOG_FILE
+     echo "" >> $LOG_FILE
+     echo "---------- https://mirrors.cloud.tencent.com/lede/snapshots/packages/ ----------" >> $LOG_FILE
+     echo "" >> $LOG_FILE
+     sleep 5
+     start_fail
+   fi
 
 }
 
@@ -1078,7 +1095,9 @@ start_run_core()
       curl -s --connect-timeout 5 -m 5 -H 'Content-Type: application/json' -H "Authorization: Bearer ${da_password}" -XPUT http://"$lan_ip":"$cn_port"/configs -d "{\"path\": \"$CONFIG_FILE\"}" 2>/dev/null
    else
       kill_clash
-      nohup "$CLASH" -d "$CLASH_CONFIG" -f "$CONFIG_FILE" >> $LOG_FILE 2>&1 &
+      #使用nobody启动内核方便代理路由自身流量
+      capabilties="cap_sys_resource,cap_dac_override,cap_net_raw,cap_net_bind_service,cap_net_admin"
+      capsh --caps="${capabilties}+eip" -- -c "capsh --user=nobody --addamb='${capabilties}' -- -c 'nohup $CLASH -d $CLASH_CONFIG -f \"$CONFIG_FILE\" >> $LOG_FILE 2>&1 &'" >> $LOG_FILE 2>&1
    fi
    uci set openclash.config.config_reload=1 2>/dev/null
    uci commit openclash
@@ -1087,9 +1106,9 @@ start_run_core()
 check_core_status()
 {
    check_time=1
-   while ( [ "$check_time" -le 3 ] && [ -z "$(pidof clash)" ] )
+   while ( [ "$check_time" -le 3 ] && [ -n "$(pidof clash)" ] )
    do
-      sleep 2
+      sleep 1
       check_time=$(expr "$check_time" + 1)
    done
 }
@@ -1105,17 +1124,17 @@ raw_config_start()
    if [ -z "$dns_port" ] || [ -z "$en_mode" ] || [ -z "$proxy_port" ]; then
       if [ -z "$dns_port" ]; then
          echo "错误: 无法获取DNS部分的监听端口设置, OpenClash 使用原始配置文件启动失败" >$START_LOG
-         echo "${LOGTIME} Get DNS 'listen' Option Error, OpenClash Can Not Start With Raw Config File" >> $LOG_FILE
+         echo "${LOGTIME} Error: Get DNS 'listen' Option Error, OpenClash Can Not Start With Raw Config File" >> $LOG_FILE
          sleep 3
       fi
       if [ -z "$en_mode" ]; then
          echo "错误: 无法获取DNS部分的运行模式设置, OpenClash 使用原始配置文件启动失败" >$START_LOG
-         echo "${LOGTIME} Get DNS 'enhanced-mode' Option Error, OpenClash Can Not Start With Raw Config File" >> $LOG_FILE
+         echo "${LOGTIME} Error: Get DNS 'enhanced-mode' Option Error, OpenClash Can Not Start With Raw Config File" >> $LOG_FILE
          sleep 3
       fi
       if [ -z "$proxy_port" ]; then
          echo "错误: 无法获取General部分的转发端口设置, OpenClash 使用原始配置文件启动失败" >$START_LOG
-         echo "${LOGTIME} Get General 'redir-port' Option Error, OpenClash Can Not Start With Raw Config File" >> $LOG_FILE
+         echo "${LOGTIME} Error: Get General 'redir-port' Option Error, OpenClash Can Not Start With Raw Config File" >> $LOG_FILE
          sleep 3
       fi
       start_fail
@@ -1126,7 +1145,7 @@ raw_config_start()
    
    if ! pidof clash >/dev/null; then
       echo "错误: OpenClash 启动失败，请到日志页面查看详细错误信息！" >$START_LOG
-      echo "${LOGTIME} OpenClash Can Not Start, Please Check The Error Info And Try Again" >> $LOG_FILE
+      echo "${LOGTIME} Error: OpenClash Can Not Start, Please Check The Error Info And Try Again" >> $LOG_FILE
       sleep 5
       start_fail
    fi
@@ -1162,10 +1181,10 @@ raw_config_start()
    fi
    
    dase=$(grep "^ \{0,\}Secret:" "$CONFIG_FILE" |awk -F ': ' '{print $2}' |awk -F '#' '{print $1}' |sed 's/^ \{0,\}//g' 2>/dev/null |sed 's/ \{0,\}$//g' 2>/dev/null |sed "s/\'//g" 2>/dev/null |sed "s/\'//g" 2>/dev/null)
-   uci set openclash.config.dashboard_password=dase 2>/dev/null
+   uci set openclash.config.dashboard_password="$dase" 2>/dev/null
    
    cn_port=$(grep "^ \{0,\}external-controller:" "$CONFIG_FILE" |awk -F ':' '{print $3}' |awk -F '#' '{print $1}' |tr -cd "[0-9]" 2>/dev/null)
-   uci set openclash.config.dashboard_password=cn_port 2>/dev/null
+   uci set openclash.config.dashboard_password="$cn_port" 2>/dev/null
    
    uci set openclash.config.restricted_mode=1
    
@@ -1177,12 +1196,12 @@ try_restore_start()
    if [ -z "$(pidof clash)" ]; then
       if [ "$rule_source" = 0 ] && [ "$enable_custom_clash_rules" = 0 ]; then
          echo "错误: OpenClash 启动失败，尝试使用原始配置文件启动..." >$START_LOG
-         echo "${LOGTIME} OpenClash Can Not Start, Try Use Raw Config Restart Again" >> $LOG_FILE
+         echo "${LOGTIME} Error: OpenClash Can Not Start, Try Use Raw Config Restart Again" >> $LOG_FILE
          sleep 3
          raw_config_start
       else
          echo "错误: OpenClash 启动失败，尝试还原第三方规则并重新启动 Clash 主程序..." >$START_LOG
-         echo "${LOGTIME} OpenClash Can Not Start, Try Use Backup Rules Start Again" >> $LOG_FILE
+         echo "${LOGTIME} Error: OpenClash Can Not Start, Try Use Backup Rules Start Again" >> $LOG_FILE
          rm -rf /tmp/yaml_general 2>/dev/null
          #获取备份rule_provider
          rule_provider_bak_len=$(sed -n '/^rule-providers:/=' "$START_BACKUP" 2>/dev/null)
@@ -1200,11 +1219,11 @@ try_restore_start()
             /usr/share/openclash/yml_field_cut.sh "$rule_bak_len" "$RULE_BAK_FILE" "$START_BACKUP"
          fi 2>/dev/null
          yml_rule_bak_merge
-         nohup "$CLASH" -d "$CLASH_CONFIG" -f "$CONFIG_FILE" >> $LOG_FILE 2>&1 &
+         start_run_core
          check_core_status
          if ! pidof clash >/dev/null; then
             echo "错误: OpenClash 启动失败，尝试使用原始配置文件启动..." >$START_LOG
-            echo "${LOGTIME} OpenClash Can Not Start, Try Use Raw Config Restart Again" >> $LOG_FILE
+            echo "${LOGTIME} Error: OpenClash Can Not Start, Try Use Raw Config Restart Again" >> $LOG_FILE
             sleep 3
             raw_config_start
          fi
@@ -1231,15 +1250,18 @@ firewall_redirect_exclude()
    if [ -z "$src_dport" ]; then
       return
    fi
-   
-   if [ -z "$en_mode_tun" ]; then
-      iptables -t mangle -A openclash -p udp --dport "$src_dport" -j RETURN >/dev/null 2>&1
+
+   if [ -z "$en_mode_tun" ] || [ "$en_mode_tun" -eq 3 ]; then
+   	  iptables -t nat -I openclash_output -p tcp --sport "$src_dport" -j RETURN >/dev/null 2>&1
+   	  iptables -t mangle -I openclash_output -p udp --sport "$src_dport" -j RETURN >/dev/null 2>&1
+      iptables -t mangle -I openclash -p udp --dport "$src_dport" -j RETURN >/dev/null 2>&1
    elif [ "$en_mode_tun" -ne 3 ]; then
-      iptables -t mangle -A openclash -p tcp --dport "$src_dport" -j RETURN >/dev/null 2>&1
-      iptables -t mangle -A openclash -p udp --dport "$src_dport" -j RETURN >/dev/null 2>&1
-   else
-      iptables -t mangle -A openclash -p udp --dport "$src_dport" -j RETURN >/dev/null 2>&1
+   	  iptables -t mangle -I openclash_output -p tcp --sport "$src_dport" -j RETURN >/dev/null 2>&1
+   	  iptables -t mangle -I openclash_output -p udp --sport "$src_dport" -j RETURN >/dev/null 2>&1
+      iptables -t mangle -I openclash -p tcp --dport "$src_dport" -j RETURN >/dev/null 2>&1
+      iptables -t mangle -I openclash -p udp --dport "$src_dport" -j RETURN >/dev/null 2>&1
    fi
+
 }
 
 set_firewall()
@@ -1369,6 +1391,7 @@ if [ -z "$en_mode_tun" ] || [ "$en_mode_tun" -eq 3 ]; then
          ip rule add fwmark "$PROXY_FWMARK" table "$PROXY_ROUTE_TABLE"
          ip route add local 0.0.0.0/0 dev lo table "$PROXY_ROUTE_TABLE"
          iptables -t mangle -N openclash
+         iptables -t mangle -F openclash
          iptables -t mangle -A openclash -m set --match-set localnetwork dst -j RETURN
          iptables -t mangle -A openclash -m set --match-set wan_ac_black_ips dst -j RETURN >/dev/null 2>&1
          iptables -t mangle -A openclash -m set --match-set lan_ac_black_macs src -j RETURN >/dev/null 2>&1
@@ -1379,21 +1402,19 @@ if [ -z "$en_mode_tun" ] || [ "$en_mode_tun" -eq 3 ]; then
             iptables -t mangle -A openclash -m set --match-set china_ip_route dst -j RETURN >/dev/null 2>&1
          fi
          iptables -t mangle -A openclash -p udp --dport 53 -j RETURN >/dev/null 2>&1
-         #端口转发
-         config_load "firewall"
-         config_foreach firewall_redirect_exclude "redirect"
          iptables -t mangle -A openclash -p udp -j TPROXY --on-port "$proxy_port" --on-ip 0.0.0.0 --tproxy-mark "$PROXY_FWMARK"
          iptables -t mangle -A PREROUTING -p udp -j openclash
       fi
    fi
 
-   if [ "$en_mode" = "fake-ip" ]; then
+   #if [ "$en_mode" = "fake-ip" ]; then
       iptables -t nat -N openclash_output
       iptables -t nat -F openclash_output
       iptables -t nat -A openclash_output -m set --match-set localnetwork dst -j RETURN
-      iptables -t nat -A openclash_output -p tcp -d 198.18.0.0/16 -j REDIRECT --to-ports "$proxy_port"
-      iptables -t nat -A OUTPUT -p tcp -j openclash_output
-   fi
+      #iptables -t nat -A openclash_output -p tcp -d 198.18.0.0/16 -j REDIRECT --to-ports "$proxy_port"
+      iptables -t nat -A openclash_output -m owner ! --uid-owner 65534 -p tcp -j REDIRECT --to-ports "$proxy_port"
+      iptables -t nat -I OUTPUT -j openclash_output
+   #fi
 
    #if [ "$ipv6_enable" -eq 1 ]; then
    #   #tcp
@@ -1439,24 +1460,21 @@ if [ -n "$en_mode_tun" ]; then
    fi
    ip rule add fwmark "$PROXY_FWMARK" table "$PROXY_ROUTE_TABLE"
    
+   #设置防火墙
+   iptables -t mangle -N openclash_output
+   iptables -t mangle -F openclash_output
+   iptables -t mangle -A openclash_output -m set --match-set localnetwork dst -j RETURN
    if [ "$en_mode_tun" -ne 3 ]; then
-      #设置防火墙
-      iptables -t mangle -N openclash_output
-      iptables -t mangle -F openclash_output
-      iptables -t mangle -A openclash_output -m set --match-set localnetwork dst -j RETURN
-      if [ "$en_mode" = "fake-ip" ]; then
-         iptables -t mangle -A openclash_output -d 198.18.0.0/16 -j MARK --set-mark "$PROXY_FWMARK"
-      fi
-      iptables -t mangle -I OUTPUT -j openclash_output
+      iptables -t mangle -A openclash_output -m owner ! --uid-owner 65534 -j MARK --set-mark "$PROXY_FWMARK"
+   else
+      iptables -t mangle -A openclash_output -m owner ! --uid-owner 65534 -p udp -j MARK --set-mark "$PROXY_FWMARK"
    fi
+   iptables -t mangle -I OUTPUT -j openclash_output
    
    iptables -t mangle -N openclash
    iptables -t mangle -F openclash
    iptables -t mangle -N openclash_dns_hijack
    iptables -t mangle -F openclash_dns_hijack
-   #端口转发
-   config_load "firewall"
-   config_foreach firewall_redirect_exclude "redirect"
    #其他流量
    iptables -t mangle -A openclash -m set --match-set localnetwork dst -j RETURN >/dev/null 2>&1
    iptables -t mangle -A openclash -m set --match-set wan_ac_black_ips dst -j RETURN >/dev/null 2>&1
@@ -1486,6 +1504,10 @@ if [ -n "$en_mode_tun" ]; then
    #        ip6tables -t mangle -I PREROUTING -j MARK --set-mark "$PROXY_FWMARK"
    #    fi
 fi
+
+#端口转发
+config_load "firewall"
+config_foreach firewall_redirect_exclude "redirect"
 }
 
 revert_firewall()
@@ -1503,7 +1525,13 @@ revert_firewall()
    for out_line in $out_lines; do
       iptables -t nat -D OUTPUT "$out_line" >/dev/null 2>&1
    done >/dev/null 2>&1
-   iptables -t nat -D OUTPUT -p tcp -j openclash_output >/dev/null 2>&1
+   iptables -t nat -D OUTPUT -j openclash_output >/dev/null 2>&1
+   
+   out_lines=$(iptables -nvL OUTPUT -t mangle |sed 1,2d |sed -n '/openclash/=' 2>/dev/null |sort -rn)
+   for out_line in $out_lines; do
+      iptables -t mangle -D OUTPUT "$out_line" >/dev/null 2>&1
+   done >/dev/null 2>&1
+   iptables -t mangle -D OUTPUT -j openclash_output >/dev/null 2>&1
 
    pre_lines=$(iptables -nvL PREROUTING -t nat |sed 1,2d |sed -n '/8\.8\./=' 2>/dev/null |sort -rn)
    for pre_line in $pre_lines; do
@@ -1598,10 +1626,10 @@ start()
 {
    #禁止多个实例
    status=$(unify_ps_status "/etc/init.d/openclash")
-   [ "$status" -gt "3" ] && echo "Multiple Start Scripts Running, Exit..." >> $LOG_FILE && exit 0
+   [ "$status" -gt "3" ] && echo "${LOGTIME} Warning: Multiple Start Scripts Running, Exit..." >> $LOG_FILE && exit 0
    
    enable=$(uci get openclash.config.enable 2>/dev/null)
-   [ "$enable" != "1" ] && echo "OpenClash Now Disabled, Need Start From Luci Page, Exit..." >> $LOG_FILE && exit 0
+   [ "$enable" != "1" ] && echo "${LOGTIME} Warning: OpenClash Now Disabled, Need Start From Luci Page, Exit..." >> $LOG_FILE && exit 0
 
    config_choose
 
@@ -1616,30 +1644,22 @@ start()
    
    echo "第二步: 配置文件检查..." >$START_LOG
    yml_check "$en_mode" "$enable_custom_dns" "$CONFIG_FILE" "$BACKUP_FILE" "$START_BACKUP"
-   yml_dns_check
-   
+
    echo "第三步: 修改配置文件..." >$START_LOG
    config_load "openclash"
    config_foreach yml_auth_get "authentication"
    yml_auth_custom "$CHANGE_FILE"
    yml_dns_custom "$enable_custom_dns" "$DNS_FILE" "$FALLBACK_FILTER_FILE"
-   /usr/share/openclash/yml_change.sh >/dev/null 2>&1 "$LOGTIME" "$en_mode" "$enable_custom_dns" "$da_password" "$cn_port" "$proxy_port" "$CHANGE_FILE" "$ipv6_enable" "$http_port" "$socks_port" "$lan_ip" "$log_level" "$proxy_mode" "$intranet_allowed" "$en_mode_tun" "$stack_type" &
+   /usr/share/openclash/yml_change.sh >/dev/null 2>&1 "$LOGTIME" "$en_mode" "$enable_custom_dns" "$da_password" "$cn_port" "$proxy_port" "$CHANGE_FILE" "$ipv6_enable" "$http_port" "$socks_port" "$lan_ip" "$log_level" "$proxy_mode" "$intranet_allowed" "$en_mode_tun" "$stack_type" "$dns_port" &
    /usr/share/openclash/yml_rules_change.sh >/dev/null 2>&1 "$LOGTIME" "$rule_source" "$enable_custom_clash_rules" "$RULE_FILE" "$set_rule_file" "$en_mode" "$enable_rule_proxy" "$BACKUP_FILE" "$RULE_PROVIDER_FILE" &
    wait
    yml_provider_path "$PROXY_PROVIDER_FILE" "proxy_provider"
    yml_provider_path "$RULE_PROVIDER_FILE" "rule_provider"
    yml_custom_rule_provider
    yml_game_custom
-   yml_merge
    
-   echo "第四步: DNS设置检查..." >$START_LOG
-   if [ -n "$(sed -n '/^ \{0,\}nameserver:/{n;p}' "$CONFIG_FILE" |grep '^ \{0,\}fallback:')" ] || [ -n "$(sed -n '/^ \{0,\}nameserver:/{n;p}' "$CONFIG_FILE" |grep 'OpenClash-General')" ]; then
-      echo "错误: 配置文件DNS选项下的Nameserver必须设置服务器，已自动还原配置文件，请重新设置！" >$START_LOG
-      echo "${LOGTIME} Nameserver Must Be Set, Please Change Your Configrations In Config.yaml" >>$LOG_FILE
-      mv "$START_BACKUP" "$CONFIG_FILE"
-      sleep 5
-      start_fail
-   fi
+   echo "第四步: 合并配置文件修改..." >$START_LOG
+   yml_merge
    
    echo "第五步: 启动主程序..." >$START_LOG
    sleep 1
@@ -1675,12 +1695,12 @@ start()
       sleep 5
    elif [ -n "$(uci get dhcp.lan.dhcpv6 2>/dev/null)" ]; then
       echo "OpenClash 启动成功，检测到您启用了IPV6的DHCP服务，可能会造成连接异常！" >$START_LOG
-      echo "${LOGTIME} OpenClash Start Successful, Please Note That Network May Abnormal With IPV6's DHCP Server" >> $LOG_FILE
+      echo "${LOGTIME} Warning: OpenClash Start Successful, Please Note That Network May Abnormal With IPV6's DHCP Server" >> $LOG_FILE
       sleep 5
    fi
    if [ "$(uci get openclash.config.restricted_mode 2>/dev/null)" = "1" ]; then
       echo "OpenClash 使用原始配置文件启动成功，部分设置可能未生效！" >$START_LOG
-      echo "${LOGTIME} OpenClash Start Successful With Raw Config File, Please Note That It's Restricted Mode Now" >> $LOG_FILE
+      echo "${LOGTIME} Warning: OpenClash Start Successful With Raw Config File, Please Note That It's Restricted Mode Now" >> $LOG_FILE
       sleep 5
    fi
    echo "OpenClash Already Start"
diff --git a/package/ctcgfw/luci-app-openclash/root/etc/openclash/Country.mmdb b/package/ctcgfw/luci-app-openclash/root/etc/openclash/Country.mmdb
index 4b0fa6ac8c..81bd96b5c1 100644
Binary files a/package/ctcgfw/luci-app-openclash/root/etc/openclash/Country.mmdb and b/package/ctcgfw/luci-app-openclash/root/etc/openclash/Country.mmdb differ
diff --git a/package/ctcgfw/luci-app-openclash/root/etc/openclash/custom/openclash_custom_fake_filter.list b/package/ctcgfw/luci-app-openclash/root/etc/openclash/custom/openclash_custom_fake_filter.list
index b7324f18a6..88847f114e 100644
--- a/package/ctcgfw/luci-app-openclash/root/etc/openclash/custom/openclash_custom_fake_filter.list
+++ b/package/ctcgfw/luci-app-openclash/root/etc/openclash/custom/openclash_custom_fake_filter.list
@@ -73,10 +73,10 @@ music.migu.cn
 #QQ快捷登录
 localhost.ptlogin2.qq.com
 #Nintendo Switch
-*.*.*.srv.nintendo.net
+*.*.*.*.srv.nintendo.net
 #Sony PlayStation
-*.*.stun.playstation.net
+*.*.*.stun.playstation.net
 #Microsoft Xbox
-xbox.*.*.microsoft.com
-*.*.xboxlive.com
+xbox.*.microsoft.com
+*.*.*.xboxlive.com
 proxy.golang.org
\ No newline at end of file
diff --git a/package/ctcgfw/luci-app-openclash/root/etc/openclash/custom/openclash_custom_rules.list b/package/ctcgfw/luci-app-openclash/root/etc/openclash/custom/openclash_custom_rules.list
index e687ad9183..6ea2b00b2b 100644
--- a/package/ctcgfw/luci-app-openclash/root/etc/openclash/custom/openclash_custom_rules.list
+++ b/package/ctcgfw/luci-app-openclash/root/etc/openclash/custom/openclash_custom_rules.list
@@ -25,6 +25,8 @@
 ##- SRC-IP-CIDR,192.168.1.208/28,DIRECT
 ##- SRC-IP-CIDR,192.168.1.224/27,DIRECT
 
+##- SRC-IP-CIDR,198.18.0.1/32,DIRECT
+
 ##此时IP为192.168.1.1和192.168.1.201的客户端流量走代理（策略），其余客户端不走代理
-##因为Fake-IP模式下，IP地址为192.168.1.1的路由器自身流量可走代理（策略），所以需要排除
+##因为Fake-IP模式下，IP地址为192.168.1.1、198.18.0.1的路由器自身流量可走代理（策略），所以需要排除
 ##在线IP段转CIDR地址：http://ip2cidr.com
\ No newline at end of file
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/clash_version.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/clash_version.sh
index 051be0c299..c65e19a860 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/clash_version.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/clash_version.sh
@@ -7,17 +7,10 @@ status=$(unify_ps_status "clash_version.sh")
 
 CKTIME=$(date "+%Y-%m-%d-%H")
 LAST_OPVER="/tmp/clash_last_version"
-HTTP_PORT=$(uci get openclash.config.http_port 2>/dev/null)
-PROXY_ADDR=$(uci get network.lan.ipaddr 2>/dev/null |awk -F '/' '{print $1}' 2>/dev/null)
 
-if [ -s "/tmp/openclash.auth" ]; then
-   PROXY_AUTH=$(cat /tmp/openclash.auth |awk -F '- ' '{print $2}' |sed -n '1p' 2>/dev/null)
-fi
-
-VERSION_URL="https://raw.githubusercontent.com/vernesong/OpenClash/master/core_version"
 if [ "$CKTIME" != "$(grep "CheckTime" $LAST_OPVER 2>/dev/null |awk -F ':' '{print $2}')" ]; then
 	 if pidof clash >/dev/null; then
-      curl -sL --connect-timeout 10 --retry 2 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" "$VERSION_URL" -o $LAST_OPVER >/dev/null 2>&1
+      curl -sL --connect-timeout 10 --retry 2 https://raw.githubusercontent.com/vernesong/OpenClash/master/core_version -o $LAST_OPVER >/dev/null 2>&1
    else
       curl -sL --connect-timeout 10 --retry 2 https://cdn.jsdelivr.net/gh/vernesong/OpenClash@master/core_version -o $LAST_OPVER >/dev/null 2>&1
    fi
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash.sh
index 935e71fc73..3a3bc9068d 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash.sh
@@ -153,6 +153,8 @@ change_dns()
          uci commit dhcp
          /etc/init.d/dnsmasq restart >/dev/null 2>&1
       fi
+      iptables -t nat -I OUTPUT -j openclash_output >/dev/null 2>&1
+      iptables -t mangle -I OUTPUT -j openclash_output >/dev/null 2>&1
       nohup /usr/share/openclash/openclash_watchdog.sh &
    fi
 }
@@ -170,6 +172,9 @@ config_download_direct()
       uci delete dhcp.@dnsmasq[0].cachesize >/dev/null 2>&1
       uci commit dhcp
       /etc/init.d/dnsmasq restart >/dev/null 2>&1
+      
+      iptables -t nat -D OUTPUT -j openclash_output >/dev/null 2>&1
+      iptables -t mangle -D OUTPUT -j openclash_output >/dev/null 2>&1
       sleep 3
 
       config_download
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_chnroute.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_chnroute.sh
index 83e1165244..1d7415c6cc 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_chnroute.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_chnroute.sh
@@ -7,16 +7,11 @@
    START_LOG="/tmp/openclash_start.log"
    LOGTIME=$(date "+%Y-%m-%d %H:%M:%S")
    LOG_FILE="/tmp/openclash.log"
-   HTTP_PORT=$(uci get openclash.config.http_port 2>/dev/null)
-   PROXY_ADDR=$(uci get network.lan.ipaddr 2>/dev/null |awk -F '/' '{print $1}' 2>/dev/null)
    china_ip_route=$(uci get openclash.config.china_ip_route 2>/dev/null)
-   
-   if [ -s "/tmp/openclash.auth" ]; then
-      PROXY_AUTH=$(cat /tmp/openclash.auth |awk -F '- ' '{print $2}' |sed -n '1p' 2>/dev/null)
-   fi
+
    echo "开始下载大陆IP白名单..." >$START_LOG
    if pidof clash >/dev/null; then
-      curl -sL --connect-timeout 10 --retry 2 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" https://raw.githubusercontent.com/DivineEngine/Profiles/master/Clash/RuleSet/Extra/ChinaIP.yaml -o /tmp/ChinaIP.yaml >/dev/null 2>&1
+      curl -sL --connect-timeout 10 --retry 2 https://raw.githubusercontent.com/DivineEngine/Profiles/master/Clash/RuleSet/Extra/ChinaIP.yaml -o /tmp/ChinaIP.yaml >/dev/null 2>&1
    else
       curl -sL --connect-timeout 10 --retry 2 https://cdn.jsdelivr.net/gh/DivineEngine/Profiles@master/Clash/RuleSet/Extra/ChinaIP.yaml -o /tmp/ChinaIP.yaml >/dev/null 2>&1
    fi
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_core.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_core.sh
index fb6952385f..5d22825eb8 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_core.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_core.sh
@@ -1,5 +1,6 @@
 #!/bin/sh
 . /lib/functions.sh
+. /usr/share/openclash/openclash_ps.sh
 
 START_LOG="/tmp/openclash_start.log"
 LOGTIME=$(date "+%Y-%m-%d %H:%M:%S")
@@ -9,8 +10,7 @@ CORE_TYPE="$1"
 en_mode=$(uci get openclash.config.en_mode 2>/dev/null)
 small_flash_memory=$(uci get openclash.config.small_flash_memory 2>/dev/null)
 CPU_MODEL=$(uci get openclash.config.core_version 2>/dev/null)
-HTTP_PORT=$(uci get openclash.config.http_port 2>/dev/null)
-PROXY_ADDR=$(uci get network.lan.ipaddr 2>/dev/null |awk -F '/' '{print $1}' 2>/dev/null)
+
 [ ! -f "/tmp/clash_last_version" ] && /usr/share/openclash/clash_version.sh 2>/dev/null
 if [ "$small_flash_memory" != "1" ]; then
    dev_core_path="/etc/openclash/core/clash"
@@ -24,19 +24,13 @@ else
    mkdir -p /tmp/etc/openclash/core
 fi
 
-
-[ -s "/tmp/openclash.auth" ] && {
-   PROXY_AUTH=$(cat /tmp/openclash.auth |awk -F '- ' '{print $2}' |sed -n '1p' 2>/dev/null)
-}
-
 case $CORE_TYPE in
 	"Tun")
    CORE_CV=$($tun_core_path -v 2>/dev/null |awk -F ' ' '{print $2}')
    CORE_LV=$(sed -n 2p /tmp/clash_last_version 2>/dev/null)
-   echo $CORE_CV >>/tmp/1
    if [ -z "$CORE_LV" ]; then
       echo "获取【Tun】内核最新版本信息失败，请稍后再试..." >$START_LOG
-      echo "${LOGTIME} 【Tun】Core Version Check Error, Please Try Again After A few seconds" >>$LOG_FILE
+      echo "${LOGTIME} Error: 【Tun】Core Version Check Error, Please Try Again After A few Seconds" >>$LOG_FILE
       sleep 5
       echo "" >$START_LOG
       exit 0
@@ -68,15 +62,15 @@ if [ "$CORE_CV" != "$CORE_LV" ] || [ -z "$CORE_CV" ]; then
 			case $CORE_TYPE in
       	"Tun")
       	echo "正在下载【Tun】版本内核，如下载失败请尝试手动下载并上传..." >$START_LOG
-				curl -sL -m 30 --retry 2 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" https://github.com/vernesong/OpenClash/releases/download/TUN-Premium/clash-"$CPU_MODEL"-"$CORE_LV".gz -o /tmp/clash_tun.gz >/dev/null 2>&1
+				curl -sL -m 30 --retry 2 https://github.com/vernesong/OpenClash/releases/download/TUN-Premium/clash-"$CPU_MODEL"-"$CORE_LV".gz -o /tmp/clash_tun.gz >/dev/null 2>&1
 				;;
 				"Game")
 				echo "正在下载【Game】版本内核，如下载失败请尝试手动下载并上传..." >$START_LOG
-				curl -sL -m 30 --retry 2 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" https://github.com/vernesong/OpenClash/releases/download/TUN/clash-"$CPU_MODEL".tar.gz -o /tmp/clash_game.tar.gz >/dev/null 2>&1
+				curl -sL -m 30 --retry 2 https://github.com/vernesong/OpenClash/releases/download/TUN/clash-"$CPU_MODEL".tar.gz -o /tmp/clash_game.tar.gz >/dev/null 2>&1
 				;;
 				*)
 				echo "正在下载【Dev】版本内核，如下载失败请尝试手动下载并上传..." >$START_LOG
-				curl -sL -m 30 --retry 2 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" https://github.com/vernesong/OpenClash/releases/download/Clash/clash-"$CPU_MODEL".tar.gz -o /tmp/clash.tar.gz >/dev/null 2>&1
+				curl -sL -m 30 --retry 2 https://github.com/vernesong/OpenClash/releases/download/Clash/clash-"$CPU_MODEL".tar.gz -o /tmp/clash.tar.gz >/dev/null 2>&1
 			esac
    else
 			case $CORE_TYPE in
@@ -131,7 +125,7 @@ if [ "$CORE_CV" != "$CORE_LV" ] || [ -z "$CORE_CV" ]; then
       
       if [ "$?" -ne "0" ]; then
       	echo "【"$CORE_TYPE"】版本内核更新失败，请检查网络或稍后再试！" >$START_LOG
-        echo "${LOGTIME} OpenClash 【"$CORE_TYPE"】 Core Update Error" >>$LOG_FILE
+        echo "${LOGTIME} Error: OpenClash 【"$CORE_TYPE"】 Core Update Error" >>$LOG_FILE
         case $CORE_TYPE in
             "Tun")
 				    rm -rf /tmp/clash_tun >/dev/null 2>&1
@@ -170,11 +164,11 @@ if [ "$CORE_CV" != "$CORE_LV" ] || [ -z "$CORE_CV" ]; then
          	 uci set openclash.config.config_reload=0
          	 uci commit openclash
          fi
-         [ "$if_restart" -eq 1 ] && /etc/init.d/openclash restart
+         [ "$if_restart" -eq 1 ] && [ "$(unify_ps_prevent)" -eq 0 ] && /etc/init.d/openclash restart
          echo "" >$START_LOG
       else
          echo "【"$CORE_TYPE"】版本内核更新失败，请确认设备闪存空间足够后再试！" >$START_LOG
-         echo "${LOGTIME} OpenClash 【"$CORE_TYPE"】 Core Update Error" >>$LOG_FILE
+         echo "${LOGTIME} Error: OpenClash 【"$CORE_TYPE"】 Core Update Error" >>$LOG_FILE
          case $CORE_TYPE in
             "Tun")
 				    rm -rf /tmp/clash_tun >/dev/null 2>&1
@@ -189,7 +183,7 @@ if [ "$CORE_CV" != "$CORE_LV" ] || [ -z "$CORE_CV" ]; then
       fi
    else
       echo "【"$CORE_TYPE"】版本内核下载失败，请检查网络或稍后再试！" >$START_LOG
-      echo "${LOGTIME} OpenClash 【"$CORE_TYPE"】 Core Update Error" >>$LOG_FILE
+      echo "${LOGTIME} Error: OpenClash 【"$CORE_TYPE"】 Core Update Error" >>$LOG_FILE
       case $CORE_TYPE in
          "Tun")
 			   rm -rf /tmp/clash_tun >/dev/null 2>&1
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_debug.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_debug.sh
index 7fe15d4aba..b594d9fb7e 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_debug.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_debug.sh
@@ -98,6 +98,9 @@ ca-certificates: $(ts_re "$(opkg status ca-certificates 2>/dev/null |grep 'Statu
 ipset: $(ts_re "$(opkg status ipset 2>/dev/null |grep 'Status' |awk -F ': ' '{print $2}' 2>/dev/null)")
 ip-full: $(ts_re "$(opkg status ip-full 2>/dev/null |grep 'Status' |awk -F ': ' '{print $2}' 2>/dev/null)")
 iptables-mod-tproxy: $(ts_re "$(opkg status iptables-mod-tproxy 2>/dev/null |grep 'Status' |awk -F ': ' '{print $2}' 2>/dev/null)")
+iptables-mod-extra: $(ts_re "$(opkg status iptables-mod-extra 2>/dev/null |grep 'Status' |awk -F ': ' '{print $2}' 2>/dev/null)")
+libcap: $(ts_re "$(opkg status libcap 2>/dev/null |grep 'Status' |awk -F ': ' '{print $2}' 2>/dev/null)")
+libcap-bin: $(ts_re "$(opkg status libcap-bin 2>/dev/null |grep 'Status' |awk -F ': ' '{print $2}' 2>/dev/null)")
 kmod-tun(TUN模式): $(ts_re "$(opkg status kmod-tun 2>/dev/null |grep 'Status' |awk -F ': ' '{print $2}' 2>/dev/null)")
 luci-compat(Luci-19.07): $(ts_re "$(opkg status luci-compat 2>/dev/null |grep 'Status' |awk -F ': ' '{print $2}' 2>/dev/null)")
 EOF
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_download_rule_list.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_download_rule_list.sh
index ee6c6ceea3..d556e588d5 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_download_rule_list.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_download_rule_list.sh
@@ -19,20 +19,16 @@
    TMP_RULE_DIR="/tmp/$RULE_FILE_NAME"
    LOGTIME=$(date "+%Y-%m-%d %H:%M:%S")
    LOG_FILE="/tmp/openclash.log"
-   HTTP_PORT=$(uci get openclash.config.http_port 2>/dev/null)
-   PROXY_ADDR=$(uci get network.lan.ipaddr 2>/dev/null |awk -F '/' '{print $1}' 2>/dev/null)
-   if [ -s "/tmp/openclash.auth" ]; then
-      PROXY_AUTH=$(cat /tmp/openclash.auth |awk -F '- ' '{print $2}' |sed -n '1p' 2>/dev/null)
-   fi
+   
    if [ "$RULE_TYPE" = "game" ]; then
       if pidof clash >/dev/null; then
-   	     curl -sL --connect-timeout 5 --retry 2 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" https://raw.githubusercontent.com/FQrabbit/SSTap-Rule/master/rules/"$DOWNLOAD_PATH" -o "$TMP_RULE_DIR" >/dev/null 2>&1
+   	     curl -sL --connect-timeout 5 --retry 2 https://raw.githubusercontent.com/FQrabbit/SSTap-Rule/master/rules/"$DOWNLOAD_PATH" -o "$TMP_RULE_DIR" >/dev/null 2>&1
       else
          curl -sL --connect-timeout 5 --retry 2 https://cdn.jsdelivr.net/gh/FQrabbit/SSTap-Rule@master/rules/"$DOWNLOAD_PATH" -o "$TMP_RULE_DIR" >/dev/null 2>&1
       fi
    elif [ "$RULE_TYPE" = "provider" ]; then
       if pidof clash >/dev/null; then
-   	     curl -sL --connect-timeout 5 --retry 2 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" https://raw.githubusercontent.com/"$DOWNLOAD_PATH" -o "$TMP_RULE_DIR" >/dev/null 2>&1
+   	     curl -sL --connect-timeout 5 --retry 2 https://raw.githubusercontent.com/"$DOWNLOAD_PATH" -o "$TMP_RULE_DIR" >/dev/null 2>&1
       else
          curl -sL --connect-timeout 5 --retry 2 https://cdn.jsdelivr.net/gh/"$(echo "$DOWNLOAD_PATH" |awk -F '/master' '{print $1}' 2>/dev/null)"@master"$(echo "$DOWNLOAD_PATH" |awk -F 'master' '{print $2}')" -o "$TMP_RULE_DIR" >/dev/null 2>&1
       fi
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_fake_filter.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_fake_filter.sh
index 10c6165ace..e3dab0845c 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_fake_filter.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_fake_filter.sh
@@ -13,7 +13,7 @@ if [ -s "$CUSTOM_FILE" ]; then
    cat "$CUSTOM_FILE" |while read -r line || [[ -n ${line} ]];
    do
       if [ -z "$(echo $line |grep '^ \{0,\}#' 2>/dev/null)" ]; then
-         echo "  - '$line'" >> "$FAKE_FILTER_FILE"
+         echo "    - '$line'" >> "$FAKE_FILTER_FILE"
       else
          continue
 	    fi
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_history_set.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_history_set.sh
index 9af4c68b19..e448b1f4f2 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_history_set.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_history_set.sh
@@ -27,7 +27,7 @@ restore_history() {
    NOW_NAME=$(echo $line |awk -F '#*#' '{print $3}')
    GROUP_STATE=$(GROUP_STATE "$GROUP_NAME")
    GROUP_STATE_NUM=0
-   while ( [ ! -z "$(pidof clash)" ] && [ "$GROUP_STATE" != "200" ] && [ "$GROUP_STATE_NUM" -le 1 ] )
+   while ( [ ! -z "$(pidof clash)" ] && [ "$GROUP_STATE" != "200" ] && [ "$GROUP_STATE_NUM" -le 3 ] )
    do
       sleep 3
       GROUP_STATE_NUM=$(expr "$GROUP_STATE_NUM" + 1)
@@ -41,7 +41,7 @@ close_all_conection() {
 }
 
 if [ -s "$HISTORY_PATH" ]; then
-   cat "$HISTORY_PATH" |while read line
+   cat "$HISTORY_PATH" |while read -r line
    do
       GROUP_NAME=$(echo $line |awk -F '#*#' '{print $1}')
       if [ "$GROUP_NAME" != "GLOBAL" ]; then
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_ipdb.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_ipdb.sh
index 39920db707..3f803a36df 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_ipdb.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_ipdb.sh
@@ -8,11 +8,7 @@
    LOGTIME=$(date "+%Y-%m-%d %H:%M:%S")
    LOG_FILE="/tmp/openclash.log"
    small_flash_memory=$(uci get openclash.config.small_flash_memory 2>/dev/null)
-   HTTP_PORT=$(uci get openclash.config.http_port 2>/dev/null)
-   PROXY_ADDR=$(uci get network.lan.ipaddr 2>/dev/null |awk -F '/' '{print $1}' 2>/dev/null)
-   if [ -s "/tmp/openclash.auth" ]; then
-      PROXY_AUTH=$(cat /tmp/openclash.auth |awk -F '- ' '{print $2}' |sed -n '1p' 2>/dev/null)
-   fi
+   
    if [ "$small_flash_memory" != "1" ]; then
    	  geoip_path="/etc/openclash/Country.mmdb"
    	  mkdir -p /etc/openclash
@@ -22,7 +18,7 @@
    fi
    echo "开始下载 GEOIP 数据库..." >$START_LOG
    if pidof clash >/dev/null; then
-      curl -sL --connect-timeout 10 --retry 2 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" https://raw.githubusercontent.com/alecthw/mmdb_china_ip_list/release/Country.mmdb -o /tmp/Country.mmdb >/dev/null 2>&1
+      curl -sL --connect-timeout 10 --retry 2 https://raw.githubusercontent.com/alecthw/mmdb_china_ip_list/release/Country.mmdb -o /tmp/Country.mmdb >/dev/null 2>&1
    else
       curl -sL --connect-timeout 10 --retry 2 http://www.ideame.top/mmdb/Country.mmdb -o /tmp/Country.mmdb >/dev/null 2>&1
    fi
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_rule.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_rule.sh
index e60badecdd..9117c8e8d9 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_rule.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_rule.sh
@@ -10,26 +10,21 @@
    LOG_FILE="/tmp/openclash.log"
    echo "开始获取使用中的第三方规则名称..." >$START_LOG
    RUlE_SOURCE=$(uci get openclash.config.rule_source 2>/dev/null)
-   HTTP_PORT=$(uci get openclash.config.http_port 2>/dev/null)
-   PROXY_ADDR=$(uci get network.lan.ipaddr 2>/dev/null |awk -F '/' '{print $1}' 2>/dev/null)
    OTHER_RULE_PROVIDER_FILE="/tmp/other_rule_provider.yaml"
    OTHER_SCRIPT_FILE="/tmp/other_rule_script.yaml"
    OTHER_RULE_FILE="/tmp/other_rule.yaml"
 
-   if [ -s "/tmp/openclash.auth" ]; then
-	    PROXY_AUTH=$(cat /tmp/openclash.auth |awk -F '- ' '{print $2}' |sed -n '1p' 2>/dev/null)
-   fi
    echo "开始下载使用中的第三方规则..." >$START_LOG
       if [ "$RUlE_SOURCE" = "lhie1" ]; then
       	 if pidof clash >/dev/null; then
-            curl -sL --connect-timeout 10 --retry 2 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" https://raw.githubusercontent.com/lhie1/Rules/master/Clash/Rule.yaml -o /tmp/rules.yaml >/dev/null 2>&1
+            curl -sL --connect-timeout 10 --retry 2 https://raw.githubusercontent.com/lhie1/Rules/master/Clash/Rule.yaml -o /tmp/rules.yaml >/dev/null 2>&1
       	 else
             curl -sL --connect-timeout 10 --retry 2 https://cdn.jsdelivr.net/gh/lhie1/Rules@master/Clash/Rule.yaml -o /tmp/rules.yaml >/dev/null 2>&1
          fi
          sed -i '1i rules:' /tmp/rules.yaml
       elif [ "$RUlE_SOURCE" = "ConnersHua" ]; then
       	 if pidof clash >/dev/null; then
-            curl -sL --connect-timeout 10 --retry 2 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" https://raw.githubusercontent.com/DivineEngine/Profiles/master/Clash/Global.yaml -o /tmp/rules.yaml >/dev/null 2>&1
+            curl -sL --connect-timeout 10 --retry 2 https://raw.githubusercontent.com/DivineEngine/Profiles/master/Clash/Global.yaml -o /tmp/rules.yaml >/dev/null 2>&1
       	 else
             curl -sL --connect-timeout 10 --retry 2 https://cdn.jsdelivr.net/gh/DivineEngine/Profiles@master/Clash/Global.yaml -o /tmp/rules.yaml >/dev/null 2>&1
          fi
@@ -38,7 +33,7 @@
          sed -i "s/- GEOIP,/#- GEOIP,/g" /tmp/rules.yaml 2>/dev/null
       elif [ "$RUlE_SOURCE" = "ConnersHua_return" ]; then
       	 if pidof clash >/dev/null; then
-            curl -sL --connect-timeout 10 --retry 2 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" https://raw.githubusercontent.com/ConnersHua/Profiles/master/Clash/China.yaml -o /tmp/rules.yaml >/dev/null 2>&1
+            curl -sL --connect-timeout 10 --retry 2 https://raw.githubusercontent.com/ConnersHua/Profiles/master/Clash/China.yaml -o /tmp/rules.yaml >/dev/null 2>&1
       	 else
             curl -sL --connect-timeout 10 --retry 2 https://cdn.jsdelivr.net/gh/DivineEngine/Profiles@master/Clash/China.yaml -o /tmp/rules.yaml >/dev/null 2>&1
          fi
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_update.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_update.sh
index 1f0f5b237f..4b48d9dfc5 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_update.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_update.sh
@@ -22,16 +22,11 @@ LAST_OPVER="/tmp/openclash_last_version"
 LAST_VER=$(sed -n 1p "$LAST_OPVER" 2>/dev/null |sed "s/^v//g")
 OP_CV=$(sed -n 1p /usr/share/openclash/res/openclash_version 2>/dev/null |awk -F '-' '{print $1}' |awk -F 'v' '{print $2}' |awk -F '.' '{print $2$3}' 2>/dev/null)
 OP_LV=$(sed -n 1p $LAST_OPVER 2>/dev/null |awk -F '-' '{print $1}' |awk -F 'v' '{print $2}' |awk -F '.' '{print $2$3}' 2>/dev/null)
-HTTP_PORT=$(uci get openclash.config.http_port 2>/dev/null)
-PROXY_ADDR=$(uci get network.lan.ipaddr 2>/dev/null |awk -F '/' '{print $1}' 2>/dev/null)
-if [ -s "/tmp/openclash.auth" ]; then
-   PROXY_AUTH=$(cat /tmp/openclash.auth |awk -F '- ' '{print $2}' |sed -n '1p' 2>/dev/null)
-fi
 
 if [ "$(expr "$OP_LV" \> "$OP_CV")" -eq 1 ] && [ -f "$LAST_OPVER" ]; then
    echo "开始下载 OpenClash-$LAST_VER ..." >$START_LOG
    if pidof clash >/dev/null; then
-      curl -sL -m 30 --retry 5 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" https://github.com/vernesong/OpenClash/releases/download/v"$LAST_VER"/luci-app-openclash_"$LAST_VER"_all.ipk -o /tmp/openclash.ipk >/dev/null 2>&1
+      curl -sL -m 30 --retry 5 https://github.com/vernesong/OpenClash/releases/download/v"$LAST_VER"/luci-app-openclash_"$LAST_VER"_all.ipk -o /tmp/openclash.ipk >/dev/null 2>&1
    else
       curl -sL -m 30 --retry 5 https://cdn.jsdelivr.net/gh/vernesong/OpenClash@master/luci-app-openclash_"$LAST_VER"_all.ipk -o /tmp/openclash.ipk >/dev/null 2>&1
    fi
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_version.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_version.sh
index e6521dcaf5..a60b0f422f 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_version.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_version.sh
@@ -3,17 +3,10 @@ CKTIME=$(date "+%Y-%m-%d-%H")
 LAST_OPVER="/tmp/openclash_last_version"
 OP_CV=$(sed -n 1p /usr/share/openclash/res/openclash_version 2>/dev/null |awk -F '-' '{print $1}' |awk -F 'v' '{print $2}' |awk -F '.' '{print $2$3}' 2>/dev/null)
 OP_LV=$(sed -n 1p $LAST_OPVER 2>/dev/null |awk -F '-' '{print $1}' |awk -F 'v' '{print $2}' |awk -F '.' '{print $2$3}' 2>/dev/null)
-HTTP_PORT=$(uci get openclash.config.http_port 2>/dev/null)
-PROXY_ADDR=$(uci get network.lan.ipaddr 2>/dev/null |awk -F '/' '{print $1}' 2>/dev/null)
 
-if [ -s "/tmp/openclash.auth" ]; then
-   PROXY_AUTH=$(cat /tmp/openclash.auth |awk -F '- ' '{print $2}' |sed -n '1p' 2>/dev/null)
-fi
-
-VERSION_URL="https://raw.githubusercontent.com/vernesong/OpenClash/master/version"
 if [ "$CKTIME" != "$(grep "CheckTime" $LAST_OPVER 2>/dev/null |awk -F ':' '{print $2}')" ]; then
    if pidof clash >/dev/null; then
-      curl -sL --connect-timeout 10 --retry 2 -x http://$PROXY_ADDR:$HTTP_PORT -U "$PROXY_AUTH" "$VERSION_URL" -o $LAST_OPVER >/dev/null 2>&1
+      curl -sL --connect-timeout 10 --retry 2 https://raw.githubusercontent.com/vernesong/OpenClash/master/version -o $LAST_OPVER >/dev/null 2>&1
    else
       curl -sL --connect-timeout 10 --retry 2 https://cdn.jsdelivr.net/gh/vernesong/OpenClash@master/version -o $LAST_OPVER >/dev/null 2>&1
    fi
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_watchdog.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_watchdog.sh
index 87f9aa7869..374192d665 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_watchdog.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/openclash_watchdog.sh
@@ -43,7 +43,8 @@ if [ "$enable" -eq 1 ]; then
 		 if [ "$CRASH_NUM" -le 3 ]; then
 	      CONFIG_FILE=$(uci get openclash.config.config_path 2>/dev/null)
 	      echo "${LOGTIME} Watchdog: Clash Core Problem, Restart." >> $LOG_FILE
-	      nohup "$CLASH" -d "$CLASH_CONFIG" -f "$CONFIG_FILE" >> $LOG_FILE 2>&1 &
+	      capabilties="cap_sys_resource,cap_dac_override,cap_net_raw,cap_net_bind_service,cap_net_admin"
+        capsh --caps="${capabilties}+eip" -- -c "capsh --user=nobody --addamb='${capabilties}' -- -c 'nohup $CLASH -d $CLASH_CONFIG -f \"$CONFIG_FILE\" >> $LOG_FILE 2>&1 &'" >> $LOG_FILE 2>&1
 	      sleep 3
 	      if [ "$core_type" = "Tun" ]; then
 	         ip route replace default dev utun table "$PROXY_ROUTE_TABLE" 2>/dev/null
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/res/openclash_version b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/res/openclash_version
index cee8c9fa8b..9fe5e0007e 100644
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/res/openclash_version
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/res/openclash_version
@@ -1,2 +1,2 @@
-v0.40.7-beta
-data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAXMAAAAqCAMAAAB2kksrAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyNpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuNi1jMTQ4IDc5LjE2NDAzNiwgMjAxOS8wOC8xMy0wMTowNjo1NyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bWxuczp4bXBNTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJlZiMiIHhtcDpDcmVhdG9yVG9vbD0iQWRvYmUgUGhvdG9zaG9wIDIxLjAgKFdpbmRvd3MpIiB4bXBNTTpJbnN0YW5jZUlEPSJ4bXAuaWlkOjJFRkY2NTE0MDM3QzExRUJCRTk1QTUyQzRCRDZBN0ZGIiB4bXBNTTpEb2N1bWVudElEPSJ4bXAuZGlkOjJFRkY2NTE1MDM3QzExRUJCRTk1QTUyQzRCRDZBN0ZGIj4gPHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6MkVGRjY1MTIwMzdDMTFFQkJFOTVBNTJDNEJENkE3RkYiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC5kaWQ6MkVGRjY1MTMwMzdDMTFFQkJFOTVBNTJDNEJENkE3RkYiLz4gPC9yZGY6RGVzY3JpcHRpb24+IDwvcmRmOlJERj4gPC94OnhtcG1ldGE+IDw/eHBhY2tldCBlbmQ9InIiPz7qj1F4AAADAFBMVEW6urpFgKIJca2iwNIGZp12tdqCgoIFXI6enp4GVYLa2tqlpaUHX5F4eHgFbanf398kapLn5+dYpdI/Pz+izeXGxsahoaFjlbHOzs5TiqqTvNRpaWknisIGcKxlnbyRkZEJaqFxcXHR5vKGv9+/v79GRkasrKy1tbVmrNVHjLQIZJnKyspiYmIHW4uEhIQ0dZtLS0tDQ0Pg4OAKdbIEWYgXgb2Li4sXYo2Ds85zobuSuM4EU4Dw9fd2dnbAwMCcnJxFmsoFYJUGdLLCwsJBQUGx0eOz1uqStchCQkImcZyUxuJsbGy2trYJaJ5Kn8+EtNCjxdlHnM2Xl5fS0tLQ0NAFZZsKYZOTxOFlZWWNjY3B1OAFaaI2kMVJns5FkbyDrcXR4uyvr6+DqsFgYGBGhalvb28ZdaqUlJQhhL0GbKXB2ecFcrAdh8M4lMgEYphyn7h0dHQFa6ayytlDfqAJWIWJweIwk8sahMF0sdU1h7URgsMCc7QBcrNRUVFUVFRVVVVSUlIFdrcLfL0HeLlWVlYKe7wGd7gEdrYDdLQDdLUDdbUEdbYOgMAOf8ASg8NXV1cSg8QShMQThMUAcrIOf78Nfr8Nfr4Mfb4Mfb0JersJe7sJeroIebkIebo6OjqqqqrU1NTV1dWrq6tISEg9PT2pqak7OzuAgIB+fn7w9/s8PDwHVoTC3u5JSUmBgYGEvN2Evd3q6upMTEzz8/P19fXh7/fB3u709PR/f3+CqcDg6u/B3e3B1eDv9PeDvNyFvt6JiYnB3e7o6Ohkq9NVos+Dq8I7l8vW1tYFZ6Dg6vDA1N9Hm8xInc3D3+9Gm8tortcLermGhoYUXokJeLcKebihv9DC3+8EVYPg7vYlg7g5lco6lcpEmcqDr8gVaJejyd8nhrzg7/fB1+MZg8DR3+iErMIFV4cKbqgGdbTv9vqButqEu9pFia+yz9+Fvd5TU1MPgMEQgcJZWVlaWlpfX19bW1tcXFxNTU1eXl5PT09QUFBYWFhdXV1OTk7////////pdpE+AAABAHRSTlP///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////8AU/cHJQAAC/pJREFUeNrsWAtUVGUev5rCCAwIg4IPRNEBH4QzoPjAXEXSFM3SJd1VK00zy9TMtHZXRBjc97KPynwNjwFjeKi8U8B8lvbQyopyt/e7tp1d110Q48f+v++7d+beATycreM5M8ffOd7v//z97/19d+69KLW3Vy8fdNkb8GcPwObH7O3tUnv8hsvegT95BDZHtUvVw1q8BH/0DGy2S8u9RfKWP3gIHpOGfect+JmHYLP03Q3Nrze8SPN/eQqk/3oNbmh+/fFPT4H0H6/BDc2vP37nKZD+7TX4vaegU819oqOjf7Lqh1dlsY/PYqezysenOz16H3032Z/sEi/0Ht77hc5Tt9++VrbWhgwfHrLWrfF2J7T9wzH8yf8b0iV3xM6tBkf8gthL3xM+0T4avxoLnPZUjOkOxYt4sZvDnuoCa1/ll/Pq2k5yc4BlwjpvZ0X285q06BTtmgRp3tW4p5YNX/bUNdFBc30F4Feg04XTHJ/vq3k0otWuZQTinVsLRP6wmj/dBd7GvUNGDbkXb3dMnaeLXMatZcDAUaMGKq7AkwMbZJx1634ez3c17po5DumqFrHxqFplYDDpqnyufk+Q5hp/GJAqmwtQldEdCqPB2M1hOzvHeZydsGnTpglTcN49FYIpJDI3azCJijZ9hhp1wV2bZDTgA00n6bqzK1wrxyF1UKkq1mAuN5mMBoNlUHe11ftotsfHJ7VzzW3B6C+b+ZjbJhfrO2eMddM8VTskVqlQ8EznmIlJAV8kfBHwGWa6ZS7ap4wlzbmJKZvmJSTMo525qKqYd5fASmC2ppV0febpwcv+qgotUzyWcwU1NQLumldDZ9jKLYuJGfk4wL0DyJePC+KBgqsFKIgtoMcQyxawF0B1Aa8DYrmbH8sdASf7Vh0qZAGBVRYSbirLVyRe1ZBf7V/Bw4yyAII4kYemxsqVqbxxrvrUM2WEoEa2ahCSmWnHytfIfm0l7JkabLEjbBPwCrN7o2HoTlqHNqB3ZkfU4KbRO9UB0jWkhk6gJkTmCoXiKRedmXmxhhv2593YpBwNDgA5GYqTnp6TQ5rLiXx+jM9nNAU5BRjDRTiQQ0+jaslfqsZUVkdKoTrcj97A5ORXoCKf4OK/BOi50R/BxpwcfTUqlvv3AxZoyOcCkr9/EJ1LDg0qYPULgH7+yysQH8srq6txIjyYRFedu0ohrmPmRSb+FuB+7t0PbNFIHkWPkwRZ8zmYzIOvTcacjpKPxJQJFzK1mtMr98EGyO0X7agZOP9bYGRmZlkNasoImZmvoOaO+fPvsLtTumlOUpg0AXfNUde/srA8lqTAiWOGwm3/zYmBX3lhYWF5FW7hmrNwYSz3CnXQUarQRWfyQww34pHbyo5zWT4V1Wpy+g2ksvC2cKfmFHqdDfHjO0uVC4eR+zrvU5Ato+dphHIjFKd7Zt8J9BRh4M5sFWbiptIvsuVgGeaL6HyUZXfARzg9Whv5B+wTJ5SWTvgUHzE3irgIPWDPzi49jdPMyc7+sAdbS+n5tUXTLFk0KEC4QxPIx7N8fRb5/HiiuYRQToX9DMxqpe+PdIOx3GiIRAxVAKYSgzmlZAYKLBZzf/Q3E1x0jjjUsfUWeuBYLIkILqFeM1UnqsifBUqM5eUpJSX8jIjIMhUzSsw0hG0Hq/Qz0BRDSZV8dhzOa5oNfELLJ3bMzmaav8mjb2o1D0VD6dBsl+bfiPA3nWjeG40T3nTX/J7S0oCA0r7Aw9nZIThbenOvoXeVbkRIdsB7eC+AQLtcevPooUNHf96g3eyOmi+0XFPzcEN5uiXdQYU6QyVpmJ4Iv5R0SqWv4hUAC1vowV3gFEyNZjB5LfTjMLJjrpEFW3m1k3wQMCKVbZDZSRGESEabnlIldifc3EpuZbha890K5m3ESFpGYuO83btJczlM8jpLKPnphNF7nMEyHBLxQyjb7QbauxXzuFUmwMvumXdh9+4LvmfZqDmYNZrle65gNIcUroSeu+88dGjmg43qwQRpmwa5CNIGSHO+kub8uNChFPorhhOsAhAF/sjlyVwt3bbKGRhBSwUiMxi5E7kq8iv0PEfQCN2gbU4K4BaRCpcrBduP5bPj2KUgIQxRtJRhQMKuXS8Dchh42VmyC1P6BqiCpLmIk+a73HCIbvMLMgMHj4n6hAZmlLmu45ArR5Zdjr6sIXTTXA/cd03N852bk6sYFbkc/rpELo4631Fzhx519xEPmjl5vtKrV5FnlMT58VPVqTTXW2SVc1WV+WrN9zgxvREP7xmMI9PJ/hCQo8CHrhKoULtnzwc4KOIH8cEeLcaz21yYPQR4mVz/IDNqUXuQY+KKu1W5RcAdQ/4+O+BjnNMwSulaAKs1fh6e4+tzyHMeGUgKxfDbLyOF96vzzioXzFU0YQRmlHPyIqXXpiY3UyA1kj5LNigUVTgmUkHQqSqVs+PY58SaWQjddxArAsmmV+c5HjxHL1NXScPHtRxAVO2iffsmolbEazFxnxaLcOTzC8LsI0AW6SpCUXicNc2SU316uXLjgfU81iCfgQI3zdvmouKy4lwexK7q2LU1p1/GdzYBU3c0r5yLMel1iMsg2x/BcqutTU2ebjKwfQhm3YIiHDHilOiG70rzvS70hX38O5idRWZyA07yGH2CJ7sqFI2AHn0C9u4dhXdE3I5R+/aqMRgI6yXbEQJkHcVRJfvE3r0TcaSXjAhXjja5z7o1EQl7a3FOQyk5NMhw0JO0RdjH6oodDgkjmN0yAnm0FPMjQxGKhGEMxhg5toH+0fNcldeJbg3oQ0eHqtuYSV/rOhFsGaQi30BzHc22Qj+WFUSvo65F0AbbVJV5KHYRZ7mQ9lPMxMZe3F6P43yNwnq2nDx+fCktvjKAlb5pWVm9GjGNZU+hkXcdP75IpgrFkXFZHUC6KtklWVn0ofS4iI8fnJX1OEK5PQ14l61L3xHcTrhp7jDH0VdyzLHi4iL6k6SYXR6Kiotj6tCV5s10o4+hwg26iqIOmqeC9q1ltXZCMOoQY+L7VUTstFPEX6wiJ+NYi2NQEaouK0QGPwQRE9Xrm7uheXIYPaYHJHP7/SMIHZw1OBSN7wu1NArIXsR62E+R5PTsjhDhepFfSrf5ms40ty86Ne3kcfqZ9KQdmwUcpZ2ctshObE+AjuNPZkUcQdTJaafYX6jX1vyKNTVYfrVU6S6RQjHcPrG6K80dhfoqueFHHTS3iW7NhLZIitwnD9Mp77FhKvJhMmFVnE0hKjeKtyriCh1dab5DBd9GHAkQ5pmxjbyzcewZ5pLmf1MVKl7TW4L/rSY5XC/y9XSb7+iIo/JpN4axbHLSYeU6ltJAQbUjUB488F7NxB07pAw3lFutel14eHiR3mqtzMgwWeOmhs+IK3HoEim5mB8Z9Dq9bJmsxjhpYZ602mEkT6dT59uscTPy+vXXTrDodDqzMI1WR2S/hXnRccZKFXmlMS56YV6/SGPJFecgg5WGLNQ5rCb1aSTqFrt41Ze1ZMDhAWuE+eW4NybdWn/rpDeavmTu3YcPv6sqVLwzSY9Orq+f/GhSmhwewtfx8w8/uqQTze8+3GPATQ0vzeqbFMjcdUl9J31bXz8w7A1yI5LCNtbe+t6OHeP6znrppcljm8I0EzvRPKOy0Cqw39hKrpnbhUargeX4UahlVBpM++UGFrFaNXnRrR1gpEizyuZoVpE3y4T7y11ErQYRK89Qn4aB3RYKtqvRlPS5YkY0JTE0RXAvLSkpUFXn9KbzoqTpSthXGL4uHjXSRHVS0xKtnxThpJIHNzWtG6eZuH27tLUj2P/jGswm2bOlGFJsW9uMNrLFUdSYnPWtttsMhtuMbcw2GrV51m3U0rcZjUaVk0KzbK0a8lab2UBtrZpBbIiY4aq0yQEOzXU9kvaI004+E+DreyZZOIFpaQ+pxXN6get8fdcFOsNCzOS0tMDONA9MC3xkOtU7qR5iM9YtEUOWkJ3GgowyYvsSzcTONfdQ/NJTILV6DX7rKfAizX/jKZCueA1+7SnwIs1/5SmQFrd5C37uIXhA8r+h+XXG11Kd19zov/AMPPCV1B4U2+wd8BDJo9ql9vY6f+9Q/S8egAe+/qq9/X8CDAAZZ1ukhtfyUQAAAABJRU5ErkJggg==
\ No newline at end of file
+v0.40.10-beta
+data:image/png;base64,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
\ No newline at end of file
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_change.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_change.sh
index c55d52080c..c64a77d326 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_change.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_change.sh
@@ -136,6 +136,20 @@
     sed -i '/bind-address:/d' "$7" 2>/dev/null
     sed -i "/^allow-lan:/a\bind-address: \"${bind_address}\"" "$7"
     
+    if [ -n "$(grep "^ \{0,\}listen:" "$7")" ]; then
+       if [ "$8" != "1" ]; then
+          sed -i "/^ \{0,\}listen:/c\  listen: 127.0.0.1:${17}" "$7" 2>/dev/null
+       else
+          sed -i "/^ \{0,\}listen:/c\  listen: 0.0.0.0:${17}" "$7" 2>/dev/null
+       fi
+    else
+       if [ "$8" != "1" ]; then
+          sed -i "/^dns:/a\  listen: 127.0.0.1:${17}" "$7" 2>/dev/null
+       else
+          sed -i "/^dns:/a\  listen: 0.0.0.0:${17}" "$7" 2>/dev/null
+       fi
+    fi 2>/dev/null
+    
     if [ -z "$(grep '^external-ui: "/usr/share/openclash/dashboard"' "$7")" ]; then
        if [ ! -z "$(grep "^ \{0,\}external-ui:" "$7")" ]; then
           sed -i '/^ \{0,\}external-ui:/c\external-ui: "/usr/share/openclash/dashboard"' "$7"
@@ -165,9 +179,9 @@
        fi
        sed -i "/^dns:/i\  dns-hijack:" "$7"
 #       sed -i "/^dns:/i\  - 8.8.8.8:53" "$7"
-       sed -i "/^dns:/i\  - tcp://8.8.8.8:53" "$7"
+       sed -i "/^dns:/i\    - tcp://8.8.8.8:53" "$7"
 #       sed -i "/^dns:/i\  - 8.8.4.4:53" "$7"
-       sed -i "/^dns:/i\  - tcp://8.8.4.4:53" "$7"
+       sed -i "/^dns:/i\    - tcp://8.8.4.4:53" "$7"
     elif [ "$15" -eq 2 ]; then
        sed -i "/^dns:/i\tun:" "$7"
        sed -i "/^dns:/i\  enable: true" "$7"
@@ -198,9 +212,9 @@
 	     sed -i "/^hosts:/,/^dns:/ {s/^ \{0,\}'/  '/}" "$7" 2>/dev/null #修改参数空格
 	  fi
 	  
-	  sed -i "s/^ \{0,\}- /  - /" "$7" 2>/dev/null
 	  if [ ! -z "$(grep "^ \{0,\}default-nameserver:" "$7")" ]; then
        sed -i "/^ \{0,\}default-nameserver:/c\  default-nameserver:" "$7"
+       sed -i "/^ \{0,\}default-nameserver:/,/,$/ {s/^ \{0,\}- /  - /g}" "$7" 2>/dev/null #修改参数空格
     fi
     
 #fake-ip-filter
@@ -217,6 +231,7 @@
       	if [ ! -z "$(grep "^ \{0,\}fake-ip-filter:" "$7")" ]; then
       	   sed -i "/^ \{0,\}fake-ip-filter:/c\  fake-ip-filter:" "$7"
       	   sed -i '/^ \{0,\}fake-ip-filter:/r/etc/openclash/fake_filter.list' "$7" 2>/dev/null
+      	   sed -i "/^ \{0,\}fake-ip-filter:/,/,$/ {s/^ \{0,\}- /    - /g}" "$7" 2>/dev/null #修改参数空格
       	else
       	   echo "  fake-ip-filter:" >> "$7"
       	   sed -i '/^ \{0,\}fake-ip-filter:/r/etc/openclash/fake_filter.list' "$7" 2>/dev/null
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_field_cut.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_field_cut.sh
index 2b7ffca440..72f6543afa 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_field_cut.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_field_cut.sh
@@ -12,13 +12,24 @@ field_cut()
       rule_provider_len=$(sed -n '/^rule-providers:/=' "$3" 2>/dev/null)
       script_len=$(sed -n '/^script:/=' "$3" 2>/dev/null)
       nameserver_len=$(sed -n '/^ \{0,\}nameserver:/=' "$3" 2>/dev/null)
-      lines="$general_len $nameserver_len $proxy_len $provider_len $group_len $rule_len $rule_provider_len $script_len"
+      if [ -z "$nameserver_len" ]; then
+         fallback_len=$(sed -n '/^ \{0,\}fallback:/=' "$3" 2>/dev/null)
+         lines="$general_len $fallback_len $proxy_len $provider_len $group_len $rule_len $rule_provider_len $script_len"
+      else
+         lines="$general_len $nameserver_len $proxy_len $provider_len $group_len $rule_len $rule_provider_len $script_len"
+      fi
    else
       fallback_filter_len=$(sed -n '/^ \{0,\}fallback-filter:/=' "$3" 2>/dev/null)
       cfw_bypass_len=$(sed -n '/^ \{0,\}cfw-bypass:/=' "$3" 2>/dev/null)
       cfw_latency_timeout_len=$(sed -n '/^ \{0,\}cfw-latency-timeout:/=' "$3" 2>/dev/null)
       nameserver_len=$(sed -n '/^ \{0,\}nameserver:/=' "$3" 2>/dev/null)
-      lines="$nameserver_len $fallback_filter_len $cfw_bypass_len $cfw_latency_timeout_len"
+      if [ -z "$nameserver_len" ]; then
+         fallback_len=$(sed -n '/^ \{0,\}fallback:/=' "$3" 2>/dev/null)
+         lines="$fallback_len $fallback_filter_len $cfw_bypass_len $cfw_latency_timeout_len"
+      else
+         lines="$nameserver_len $fallback_filter_len $cfw_bypass_len $cfw_latency_timeout_len"
+      fi
+      
    fi
    
    for i in $lines; do
@@ -103,6 +114,8 @@ fi
    fi
    sed -i '/^ \{0,\}tun:/,/^ \{0,\}enable:/d' "$2" 2>/dev/null
    sed -i '/^ \{0,\}dns-hijack:/d' "$2" 2>/dev/null
+   sed -i '/^ \{0,\}macOS-auto-route:/d' "$2" 2>/dev/null
+   sed -i '/^ \{0,\}macOS-auto-detect-interface:/d' "$2" 2>/dev/null
    sed -i '/^ \{0,\}stack:/d' "$2" 2>/dev/null
    sed -i '/^ \{0,\}device-url:/d' "$2" 2>/dev/null
    sed -i '/^ \{0,\}dns-listen:/d' "$2" 2>/dev/null
\ No newline at end of file
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_groups_set.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_groups_set.sh
index 008fd33fd3..ef8f29734b 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_groups_set.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_groups_set.sh
@@ -38,7 +38,7 @@ set_groups()
 
 	if [ "$1" = "$3" ]; then
 	   set_group=1
-	   echo "  - \"${2}\"" >>$GROUP_FILE
+	   echo "      - \"${2}\"" >>$GROUP_FILE
 	fi
 
 }
@@ -56,7 +56,7 @@ set_relay_groups()
 
   if [ ! -z "$server_relay_num" ] && [ "$server_group_name" = "$3" ]; then
      set_group=1
-     echo "$server_relay_num #  - \"${2}\"" >>/tmp/relay_server
+     echo "$server_relay_num #      - \"${2}\"" >>/tmp/relay_server
 	fi
 }
 
@@ -97,7 +97,7 @@ set_other_groups()
       return
    fi
    set_group=1
-   echo "  - ${1}" >>$GROUP_FILE
+   echo "      - ${1}" >>$GROUP_FILE
 
 }
 
@@ -134,7 +134,7 @@ set_provider_groups()
 
 	if [ "$1" = "$3" ]; then
 	   set_proxy_provider=1
-	   echo "  - ${2}" >>$GROUP_FILE
+	   echo "      - ${2}" >>$GROUP_FILE
 	fi
 
 }
@@ -181,10 +181,10 @@ yml_groups_set()
    
    echo "正在写入【$type】-【$name】策略组到配置文件【$CONFIG_NAME】..." >$START_LOG
    
-   echo "- name: $name" >>$GROUP_FILE
-   echo "  type: $type" >>$GROUP_FILE
+   echo "  - name: $name" >>$GROUP_FILE
+   echo "    type: $type" >>$GROUP_FILE
    group_name="$name"
-   echo "  proxies: $group_name" >>$GROUP_FILE
+   echo "    proxies: $group_name" >>$GROUP_FILE
    
    #名字变化时处理规则部分
    if [ "$name" != "$old_name" ] && [ ! -z "$old_name" ]; then
@@ -211,30 +211,30 @@ yml_groups_set()
 	    rm -rf /tmp/relay_server 2>/dev/null
 	 fi
 
-   echo "  use: $group_name" >>$GROUP_FILE
+   echo "    use: $group_name" >>$GROUP_FILE
    
    config_foreach set_proxy_provider "proxy-provider" "$group_name" #加入代理集
 
    if [ "$set_group" -eq 1 ]; then
-      sed -i "/^ \{0,\}proxies: ${group_name}/c\  proxies:" $GROUP_FILE
+      sed -i "/^ \{0,\}proxies: ${group_name}/c\    proxies:" $GROUP_FILE
    else
       sed -i "/proxies: ${group_name}/d" $GROUP_FILE 2>/dev/null
    fi
    
    if [ "$set_proxy_provider" -eq 1 ]; then
-      sed -i "/^ \{0,\}use: ${group_name}/c\  use:" $GROUP_FILE
+      sed -i "/^ \{0,\}use: ${group_name}/c\    use:" $GROUP_FILE
    else
       sed -i "/use: ${group_name}/d" $GROUP_FILE 2>/dev/null
    fi
    
    [ ! -z "$test_url" ] && {
-   	  echo "  url: $test_url" >>$GROUP_FILE
+   	  echo "    url: $test_url" >>$GROUP_FILE
    }
    [ ! -z "$test_interval" ] && {
-      echo "  interval: \"$test_interval\"" >>$GROUP_FILE
+      echo "    interval: \"$test_interval\"" >>$GROUP_FILE
    }
    [ ! -z "$tolerance" ] && {
-      echo "  tolerance: \"$tolerance\"" >>$GROUP_FILE
+      echo "    tolerance: \"$tolerance\"" >>$GROUP_FILE
    }
 }
 
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_proxys_get.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_proxys_get.sh
index 650fc9438f..f5caee6427 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_proxys_get.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_proxys_get.sh
@@ -559,6 +559,11 @@ do
       password="$(cfg_get "password:" "$single_server")"
    fi
    
+   if [ "$server_type" = "http" ]; then
+      #sni:
+      sni="$(cfg_get "sni:" "$single_server")"
+   fi
+   
    if [ "$server_type" = "snell" ]; then
       #psk:
       psk="$(cfg_get "psk:" "$single_server")"
@@ -660,13 +665,17 @@ do
       else
          ${uci_set}password="$password"
 	    fi
+	    
+      if [ "$server_type" = "http" ]; then
+         ${uci_set}sni="$sni"
+      fi
 	   
 	    if [ "$server_type" = "trojan" ]; then
-        ${uci_set}sni="$sni"
-        ${uci_del}alpn >/dev/null 2>&1
-        for alpn in $alpns; do
-           ${uci_add}alpn="$alpn" >/dev/null 2>&1
-        done
+         ${uci_set}sni="$sni"
+         ${uci_del}alpn >/dev/null 2>&1
+         for alpn in $alpns; do
+            ${uci_add}alpn="$alpn" >/dev/null 2>&1
+         done
 	    fi
    else
 #添加新节点
@@ -755,6 +764,10 @@ do
       else
          ${uci_set}password="$password"
 	    fi
+	    
+	    if [ "$server_type" = "http" ]; then
+         ${uci_set}sni="$sni"
+      fi
 	   
 	    if [ "$server_type" = "trojan" ]; then
          ${uci_set}sni="$sni"
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_proxys_set.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_proxys_set.sh
index 601e808bbc..25f1b3dac0 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_proxys_set.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_proxys_set.sh
@@ -120,7 +120,7 @@ set_alpn()
       return
    fi
 cat >> "$SERVER_FILE" <<-EOF
-    - $1
+      - $1
 EOF
 }
 
@@ -130,7 +130,7 @@ set_http_path()
       return
    fi
 cat >> "$SERVER_FILE" <<-EOF
-      - '$1'
+        - '$1'
 EOF
 }
 
@@ -259,54 +259,54 @@ yml_servers_set()
 #ss
    if [ "$type" = "ss" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-- name: "$name"
-  type: $type
-  server: $server
-  port: $port
-  cipher: $cipher
-  password: "$password"
+  - name: "$name"
+    type: $type
+    server: $server
+    port: $port
+    cipher: $cipher
+    password: "$password"
 EOF
       if [ ! -z "$udp" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  udp: $udp
+    udp: $udp
 EOF
      fi
      if [ ! -z "$obfss" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  $obfss
-  plugin-opts:
-    mode: $obfs
+    $obfss
+    plugin-opts:
+      mode: $obfs
 EOF
         if [ ! -z "$host" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-    host: $host
+      host: $host
 EOF
         fi
         if [  "$obfss" = "plugin: v2ray-plugin" ]; then
            if [ ! -z "$tls" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-    tls: $tls
+      tls: $tls
 EOF
            fi
            if [ ! -z "$skip_cert_verify" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-    skip-cert-verify: $skip_cert_verify
+      skip-cert-verify: $skip_cert_verify
 EOF
            fi
            if [ ! -z "$path" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-    $path
+      $path
 EOF
            fi
            if [ ! -z "$mux" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-    mux: $mux
+      mux: $mux
 EOF
            fi
            if [ ! -z "$custom" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-    headers:
-      custom: $custom
+      headers:
+        custom: $custom
 EOF
            fi
         fi
@@ -316,28 +316,28 @@ EOF
 #ssr
 if [ "$type" = "ssr" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-- name: "$name"
-  type: $type
-  server: $server
-  port: $port
-  cipher: $cipher_ssr
-  password: "$password"
-  obfs: "$obfs_ssr"
-  protocol: "$protocol"
+  - name: "$name"
+    type: $type
+    server: $server
+    port: $port
+    cipher: $cipher_ssr
+    password: "$password"
+    obfs: "$obfs_ssr"
+    protocol: "$protocol"
 EOF
    if [ ! -z "$obfs_param" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  obfs-param: $obfs_param
+    obfs-param: $obfs_param
 EOF
    fi
    if [ ! -z "$protocol_param" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  protocol-param: $protocol_param
+    protocol-param: $protocol_param
 EOF
    fi
    if [ ! -z "$udp" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  udp: $udp
+    udp: $udp
 EOF
    fi
 fi
@@ -345,62 +345,62 @@ fi
 #vmess
    if [ "$type" = "vmess" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-- name: "$name"
-  type: $type
-  server: $server
-  port: $port
-  uuid: $uuid
-  alterId: $alterId
-  cipher: $securitys
+  - name: "$name"
+    type: $type
+    server: $server
+    port: $port
+    uuid: $uuid
+    alterId: $alterId
+    cipher: $securitys
 EOF
       if [ ! -z "$udp" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  udp: $udp
+    udp: $udp
 EOF
       fi
       if [ ! -z "$skip_cert_verify" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  skip-cert-verify: $skip_cert_verify
+    skip-cert-verify: $skip_cert_verify
 EOF
       fi
       if [ ! -z "$tls" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  tls: $tls
+    tls: $tls
 EOF
       fi
       if [ ! -z "$servername" ] && [ "$tls" = "true" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  servername: $servername
+    servername: $servername
 EOF
       fi
       if [ "$obfs_vmess" != "none" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  $obfs_vmess
+    $obfs_vmess
 EOF
          if [ ! -z "$path" ] && [ "$obfs_vmess" = "network: ws" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  $path
+    $path
 EOF
          fi
          if [ ! -z "$custom" ] && [ "$obfs_vmess" = "network: ws" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  ws-headers:
-    $custom
+    ws-headers:
+      $custom
 EOF
          fi
          if [ ! -z "$http_path" ] && [ "$obfs_vmess" = "network: http" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  http-opts:
-    method: "GET"
-    path:
+    http-opts:
+      method: "GET"
+      path:
 EOF
             config_list_foreach "$section" "http_path" set_http_path
          fi
          if [ "$keep_alive" = "true" ] && [ "$obfs_vmess" = "network: http" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-    headers:
-      Connection:
-        - keep-alive
+      headers:
+        Connection:
+          - keep-alive
 EOF
          fi
       fi
@@ -409,34 +409,34 @@ EOF
 #socks5
    if [ "$type" = "socks5" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-- name: "$name"
-  type: $type
-  server: $server
-  port: $port
+  - name: "$name"
+    type: $type
+    server: $server
+    port: $port
 EOF
       if [ ! -z "$auth_name" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  username: $auth_name
+    username: $auth_name
 EOF
       fi
       if [ ! -z "$auth_pass" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  password: $auth_pass
+    password: $auth_pass
 EOF
       fi
       if [ ! -z "$udp" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  udp: $udp
+    udp: $udp
 EOF
       fi
       if [ ! -z "$skip_cert_verify" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  skip-cert-verify: $skip_cert_verify
+    skip-cert-verify: $skip_cert_verify
 EOF
       fi
       if [ ! -z "$tls" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  tls: $tls
+    tls: $tls
 EOF
       fi
    fi
@@ -444,29 +444,34 @@ EOF
 #http
    if [ "$type" = "http" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-- name: "$name"
-  type: $type
-  server: $server
-  port: $port
+  - name: "$name"
+    type: $type
+    server: $server
+    port: $port
 EOF
       if [ ! -z "$auth_name" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  username: $auth_name
+    username: $auth_name
 EOF
       fi
       if [ ! -z "$auth_pass" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  password: $auth_pass
+    password: $auth_pass
 EOF
       fi
       if [ ! -z "$skip_cert_verify" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  skip-cert-verify: $skip_cert_verify
+    skip-cert-verify: $skip_cert_verify
 EOF
       fi
       if [ ! -z "$tls" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  tls: $tls
+    tls: $tls
+EOF
+      fi
+      if [ ! -z "$sni" ]; then
+cat >> "$SERVER_FILE" <<-EOF
+    sni: $sni
 EOF
       fi
    fi
@@ -474,31 +479,31 @@ EOF
 #trojan
    if [ "$type" = "trojan" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-- name: "$name"
-  type: $type
-  server: $server
-  port: $port
-  password: "$password"
+  - name: "$name"
+    type: $type
+    server: $server
+    port: $port
+    password: "$password"
 EOF
    if [ ! -z "$udp" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  udp: $udp
+    udp: $udp
 EOF
    fi
    if [ ! -z "$sni" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  sni: $sni
+    sni: $sni
 EOF
    fi
    if [ ! -z "$alpn" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  alpn:
+    alpn:
 EOF
       config_list_foreach "$section" "alpn" set_alpn
    fi
    if [ ! -z "$skip_cert_verify" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  skip-cert-verify: $skip_cert_verify
+    skip-cert-verify: $skip_cert_verify
 EOF
    fi
    fi
@@ -506,17 +511,17 @@ EOF
 #snell
    if [ "$type" = "snell" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-- name: "$name"
-  type: $type
-  server: $server
-  port: $port
-  psk: $psk
+  - name: "$name"
+    type: $type
+    server: $server
+    port: $port
+    psk: $psk
 EOF
    if [ "$obfs_snell" != "none" ] && [ ! -z "$host" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  obfs-opts:
-    mode: $obfs_snell
-    host: $host
+    obfs-opts:
+      mode: $obfs_snell
+      host: $host
 EOF
    fi
    fi
@@ -573,7 +578,7 @@ echo "开始写入配置文件【$CONFIG_NAME】的代理集信息..." >$START_L
 echo "proxy-providers:" >$PROXY_PROVIDER_FILE
 rm -rf /tmp/Proxy_Provider
 config_foreach yml_proxy_provider_set "proxy-provider"
-sed -i "s/^ \{0,\}/  - /" /tmp/Proxy_Provider 2>/dev/null #添加参数
+sed -i "s/^ \{0,\}/      - /" /tmp/Proxy_Provider 2>/dev/null #添加参数
 if [ "$(grep "-" /tmp/Proxy_Provider 2>/dev/null |wc -l)" -eq 0 ]; then
    rm -rf $PROXY_PROVIDER_FILE
    rm -rf /tmp/Proxy_Provider
@@ -588,7 +593,7 @@ echo "Proxy:" >$SERVER_FILE
 config_foreach yml_servers_set "servers"
 egrep '^ {0,}-' $SERVER_FILE |grep name: |awk -F 'name: ' '{print $2}' |sed 's/,.*//' 2>/dev/null >/tmp/Proxy_Server 2>&1
 if [ -s "/tmp/Proxy_Server" ]; then
-   sed -i "s/^ \{0,\}/  - /" /tmp/Proxy_Server 2>/dev/null #添加参数
+   sed -i "s/^ \{0,\}/      - /" /tmp/Proxy_Server 2>/dev/null #添加参数
 else
    rm -rf $SERVER_FILE
    rm -rf /tmp/Proxy_Server
@@ -600,74 +605,74 @@ if [ "$rule_sources" = "ConnersHua" ] && [ "$servers_if_update" != "1" ] && [ -z
 echo "使用ConnersHua(规则集)规则创建中..." >$START_LOG
 echo "proxy-groups:" >>$SERVER_FILE
 cat >> "$SERVER_FILE" <<-EOF
-- name: Auto - UrlTest
-  type: url-test
+  - name: Auto - UrlTest
+    type: url-test
 EOF
 if [ -f "/tmp/Proxy_Server" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  proxies:
+    proxies:
 EOF
 fi
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-  url: https://cp.cloudflare.com/generate_204
-  interval: "600"
-  tolerance: "150"
-- name: Proxy
-  type: select
-  proxies:
-  - Auto - UrlTest
-  - DIRECT
+    url: https://cp.cloudflare.com/generate_204
+    interval: "600"
+    tolerance: "150"
+  - name: Proxy
+    type: select
+    proxies:
+      - Auto - UrlTest
+      - DIRECT
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-- name: Domestic
-  type: select
-  proxies:
-  - DIRECT
-  - Proxy
-- name: Others
-  type: select
-  proxies:
-  - Proxy
-  - DIRECT
-  - Domestic
-- name: AsianTV
-  type: select
-  proxies:
-  - DIRECT
-  - Proxy
+  - name: Domestic
+    type: select
+    proxies:
+      - DIRECT
+      - Proxy
+  - name: Others
+    type: select
+    proxies:
+      - Proxy
+      - DIRECT
+      - Domestic
+  - name: AsianTV
+    type: select
+    proxies:
+      - DIRECT
+      - Proxy
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-- name: GlobalTV
-  type: select
-  proxies:
-  - Proxy
-  - DIRECT
+  - name: GlobalTV
+    type: select
+    proxies:
+      - Proxy
+      - DIRECT
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
@@ -689,188 +694,188 @@ elif [ "$rule_sources" = "lhie1" ] && [ "$servers_if_update" != "1" ] && [ -z "$
 echo "使用lhie1规则创建中..." >$START_LOG
 echo "proxy-groups:" >>$SERVER_FILE
 cat >> "$SERVER_FILE" <<-EOF
-- name: Auto - UrlTest
-  type: url-test
+  - name: Auto - UrlTest
+    type: url-test
 EOF
 if [ -f "/tmp/Proxy_Server" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  proxies:
+    proxies:
 EOF
 fi
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-  url: https://cp.cloudflare.com/generate_204
-  interval: "600"
-  tolerance: "150"
-- name: Proxy
-  type: select
-  proxies:
-  - Auto - UrlTest
-  - DIRECT
+    url: https://cp.cloudflare.com/generate_204
+    interval: "600"
+    tolerance: "150"
+  - name: Proxy
+    type: select
+    proxies:
+      - Auto - UrlTest
+      - DIRECT
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-- name: Domestic
-  type: select
-  proxies:
-  - DIRECT
-  - Proxy
-- name: Others
-  type: select
-  proxies:
-  - Proxy
-  - DIRECT
-  - Domestic
-- name: Apple
-  type: select
-  proxies:
-  - DIRECT
-  - Proxy
-- name: Microsoft
-  type: select
-  proxies:
-  - DIRECT
-  - Proxy
-- name: Netflix
-  type: select
-  proxies:
-  - GlobalTV
-  - DIRECT
+  - name: Domestic
+    type: select
+    proxies:
+      - DIRECT
+      - Proxy
+  - name: Others
+    type: select
+    proxies:
+      - Proxy
+      - DIRECT
+      - Domestic
+  - name: Apple
+    type: select
+    proxies:
+      - DIRECT
+      - Proxy
+  - name: Microsoft
+    type: select
+    proxies:
+      - DIRECT
+      - Proxy
+  - name: Netflix
+    type: select
+    proxies:
+      - GlobalTV
+      - DIRECT
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-- name: Youtube
-  type: select
-  proxies:
-  - GlobalTV
-  - DIRECT
+  - name: Youtube
+    type: select
+    proxies:
+      - GlobalTV
+      - DIRECT
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-- name: Spotify
-  type: select
-  proxies:
-  - GlobalTV
-  - DIRECT
+  - name: Spotify
+    type: select
+    proxies:
+      - GlobalTV
+      - DIRECT
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-- name: Steam
-  type: select
-  proxies:
-  - DIRECT
-  - Proxy
+  - name: Steam
+    type: select
+    proxies:
+      - DIRECT
+      - Proxy
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-- name: AdBlock
-  type: select
-  proxies:
-  - REJECT
-  - DIRECT
-  - Proxy
-- name: AsianTV
-  type: select
-  proxies:
-  - DIRECT
-  - Proxy
+  - name: AdBlock
+    type: select
+    proxies:
+      - REJECT
+      - DIRECT
+      - Proxy
+  - name: AsianTV
+    type: select
+    proxies:
+      - DIRECT
+      - Proxy
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-- name: GlobalTV
-  type: select
-  proxies:
-  - Proxy
-  - DIRECT
+  - name: GlobalTV
+    type: select
+    proxies:
+      - Proxy
+      - DIRECT
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-- name: Speedtest
-  type: select
-  proxies:
-  - Proxy
-  - DIRECT
+  - name: Speedtest
+    type: select
+    proxies:
+      - Proxy
+      - DIRECT
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-- name: Telegram
-  type: select
-  proxies:
-  - Proxy
-  - DIRECT
+  - name: Telegram
+    type: select
+    proxies:
+      - Proxy
+      - DIRECT
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-- name: PayPal
-  type: select
-  proxies:
-  - DIRECT
-  - Proxy
+  - name: PayPal
+    type: select
+    proxies:
+      - DIRECT
+      - Proxy
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
@@ -908,44 +913,44 @@ elif [ "$rule_sources" = "ConnersHua_return" ] && [ "$servers_if_update" != "1"
 echo "使用ConnersHua回国规则创建中..." >$START_LOG
 echo "proxy-groups:" >>$SERVER_FILE
 cat >> "$SERVER_FILE" <<-EOF
-- name: Auto - UrlTest
-  type: url-test
+  - name: Auto - UrlTest
+    type: url-test
 EOF
 if [ -f "/tmp/Proxy_Server" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  proxies:
+    proxies:
 EOF
 fi
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-  url: https://cp.cloudflare.com/generate_204
-  interval: "600"
-  tolerance: "150"
-- name: Proxy
-  type: select
-  proxies:
-  - Auto - UrlTest
-  - DIRECT
+    url: https://cp.cloudflare.com/generate_204
+    interval: "600"
+    tolerance: "150"
+  - name: Proxy
+    type: select
+    proxies:
+      - Auto - UrlTest
+      - DIRECT
 EOF
 cat /tmp/Proxy_Server >> $SERVER_FILE 2>/dev/null
 if [ -f "/tmp/Proxy_Provider" ]; then
 cat >> "$SERVER_FILE" <<-EOF
-  use:
+    use:
 EOF
 fi
 cat /tmp/Proxy_Provider >> $SERVER_FILE 2>/dev/null
 cat >> "$SERVER_FILE" <<-EOF
-- name: Others
-  type: select
-  proxies:
-  - Proxy
-  - DIRECT
+  - name: Others
+    type: select
+    proxies:
+      - Proxy
+      - DIRECT
 EOF
 ${UCI_SET}rule_source="ConnersHua_return"
 ${UCI_SET}Proxy="Proxy"
diff --git a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_rules_change.sh b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_rules_change.sh
index 101294e1a9..3474cd5c1a 100755
--- a/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_rules_change.sh
+++ b/package/ctcgfw/luci-app-openclash/root/usr/share/openclash/yml_rules_change.sh
@@ -29,17 +29,6 @@ yml_other_set()
       sed -i '/- DOMAIN-KEYWORD,find_node,DIRECT/d' "$4" 2>/dev/null
       sed -i '/- DOMAIN-KEYWORD,BitTorrent,DIRECT/d' "$4" 2>/dev/null
       sed -i '/- DOMAIN-KEYWORD,announce_peer,DIRECT/d' "$4" 2>/dev/null
-      
-      if [ -z "$(grep '^ \{0,\}- IP-CIDR,198.18.0.1/16,REJECT,no-resolve' "$4")" ] && [ "$6" = "fake-ip" ]; then
-         if [ ! -z "$(grep "^ \{0,\}- IP-CIDR,198.18.0.1/16" "$4")" ]; then
-            sed -i "/^ \{0,\}- IP-CIDR,198.18.0.1\/16/c\- IP-CIDR,198.18.0.1\/16,REJECT,no-resolve" "$4" 2>/dev/null
-         else
-            sed -i '1,/^ \{0,\}- GEOIP/{/^ \{0,\}- GEOIP/s/^ \{0,\}- GEOIP/- IP-CIDR,198.18.0.1\/16,REJECT,no-resolve\n&/}' "$4" 2>/dev/null
-            if [ -z "$(grep '^- IP-CIDR,198.18.0.1/16,REJECT,no-resolve' "$4")" ]; then
-               sed -i '1,/^ \{0,\}- MATCH/{/^ \{0,\}- MATCH/s/^ \{0,\}- MATCH/- IP-CIDR,198.18.0.1\/16,REJECT,no-resolve\n&/}' "$4" 2>/dev/null
-            fi
-         fi
-      fi
 
       if [ "$7" = 1 ]; then
          sed -i '1,/^ \{0,\}- GEOIP/{/^ \{0,\}- GEOIP/s/^ \{0,\}- GEOIP/- DOMAIN-KEYWORD,tracker,DIRECT\n&/}' "$4" 2>/dev/null