From 3e7e13cc63a3c4fa32d6e2fbd64e6876aaa4c3b4 Mon Sep 17 00:00:00 2001
From: qaq <bqlpfy@gmail.com>
Date: Sun, 17 Aug 2025 22:02:04 +0800
Subject: [PATCH] =?UTF-8?q?=E5=A2=9E=E5=8A=A0=E5=8D=8F=E8=AE=AE=E5=B1=8F?=
 =?UTF-8?q?=E8=94=BD=E6=94=AF=E6=8C=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/docker-build.yml |  2 ++
 go-gost/main.go                    |  1 -
 install.sh                         | 23 ++++-------------------
 3 files changed, 6 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
index 518a8fd..ed7e45d 100644
--- a/.github/workflows/docker-build.yml
+++ b/.github/workflows/docker-build.yml
@@ -16,6 +16,8 @@ jobs:
     if: contains(github.event.head_commit.message, '[skip gost]') == false
     name: Build & Compress GOST Binary
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v3
 
diff --git a/go-gost/main.go b/go-gost/main.go
index f086d5b..3bfdbdf 100644
--- a/go-gost/main.go
+++ b/go-gost/main.go
@@ -147,5 +147,4 @@ func main() {
 }
 
 // GOOS=linux GOARCH=amd64 go build -ldflags="-s -w" -o gost
-//
 // upx --best --lzma gost
diff --git a/install.sh b/install.sh
index 088fa58..4dd576a 100644
--- a/install.sh
+++ b/install.sh
@@ -272,25 +272,16 @@ block_protocol() {
   # 构造 IP 排除字符串
   ip_expr=""
   for ip in "${ips[@]}"; do
-    ip_expr+="    ip.src != \"$ip\" && ip.dst != \"$ip\" && "
+    ip_expr+="ip.src != \"$ip\" && "
   done
   ip_expr=${ip_expr% && }
 
-  # 内网和本机流量规则
-  net_expr="!cidr(ip.src, \"127.0.0.0/8\") && !cidr(ip.dst, \"127.0.0.0/8\") &&
-    !cidr(ip.src, \"192.168.0.0/16\") && !cidr(ip.dst, \"192.168.0.0/16\") &&
-    !cidr(ip.src, \"10.0.0.0/8\") && !cidr(ip.dst, \"10.0.0.0/8\") &&
-    !cidr(ip.src, \"172.16.0.0/12\") && !cidr(ip.dst, \"172.16.0.0/12\")"
-
   # 写入规则
   [[ "$block_http" == "y" ]] && cat >> "$file" <<EOF
 - name: block http
   action: block
   log: true
-  expr: >
-    http != nil &&
-    $net_expr &&
-$ip_expr
+  expr: http != nil && $ip_expr
 EOF
 
   [[ "$block_tls" == "y" ]] && cat >> "$file" <<EOF
@@ -298,10 +289,7 @@ EOF
 - name: block tls
   action: block
   log: true
-  expr: >
-    tls != nil &&
-    $net_expr &&
-$ip_expr
+  expr: tls != nil && $ip_expr
 EOF
 
   [[ "$block_socks5" == "y" ]] && cat >> "$file" <<EOF
@@ -309,10 +297,7 @@ EOF
 - name: block socks
   action: block
   log: true
-  expr: >
-    socks != nil &&
-    $net_expr &&
-$ip_expr
+  expr: socks != nil && $ip_expr
 EOF
 
     echo "📝 已生成 $file"