The problem

If foreign domains are resolved by your local ISP's DNS, results can be poisoned (pointed at wrong IPs); but sending every query through the proxy can resolve local sites abroad and slow them down. The ideal is to split.

Recommended policy

  • Domestic domains → resolve directly via a domestic DNS (e.g. 223.5.5.5) — fast and accurate.
  • Foreign domains → query 1.1.1.1 or 8.8.8.8 through the proxy to avoid poisoning.
  • Enabling fakeip (sing-box) further reduces leaks and speeds things up.

Verify it

Connected to the proxy, visit a "DNS leak test" site. If every resolver shown is abroad and none is your local ISP, there's no leak.