update: app rules

resources/rules/app.clash.yaml

@@ -8,14 +8,26 @@ experimental:
   ignore-resolve-fail: true
 dns:
   enable: true
+  # listen: 0.0.0.0:53
   ipv6: false
-  enhanced-mode: redir-host
-  nameserver:
-    - 1.2.4.8
+
+  default-nameserver:
     - 223.5.5.5
+    - 119.29.29.29
+  enhanced-mode: redir-host
+  fake-ip-range: 198.18.0.1/16
+  use-hosts: true
+  nameserver:
+    - https://dns.alidns.com/dns-query
+    - https://doh.pub/dns-query
   fallback:
     - tls://1.0.0.1:853
-    - tls://dns.google:853
+    - https://dns.google/dns-query
+  fallback-filter:
+    geoip: true
+    ipcidr:
+      - 240.0.0.0/4
+
 proxies:
 
 proxy-groups: