diff --git a/Surge/Surge 3/Head.conf b/Surge/Surge 3/Head.conf
index cacd6f6..43fe580 100644
--- a/Surge/Surge 3/Head.conf	
+++ b/Surge/Surge 3/Head.conf	
@@ -1,5 +1,11 @@
 [General]
 // General
+loglevel = notify
+
+skip-proxy = 127.0.0.1, 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, 100.64.0.0/10, 17.0.0.0/8, localhost, *.local, *.crashlytics.com
+tun-excluded-routes = 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12
+tun-included-routes = 192.168.1.12/32
+
 http-listen = 0.0.0.0:8888
 socks5-listen = 0.0.0.0:8889
 
@@ -16,8 +22,6 @@ show-error-page-for-reject = true
 dns-server = system, 119.29.29.29, 119.28.28.28, 1.2.4.8
 
 // Advanced
-loglevel = notify
-skip-proxy = 127.0.0.1, 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, 100.64.0.0/10, 17.0.0.0/8, localhost, *.local, *.crashlytics.com
 exclude-simple-hostnames = true
 use-default-policy-if-wifi-not-primary = false
 
@@ -25,6 +29,7 @@ use-default-policy-if-wifi-not-primary = false
 allow-wifi-access = true
 enhanced-mode-by-rule = false
 network-framework = false
+//always-real-ip = google.com
 
 [Replica]
 hide-apple-request = true