---
title: "Rules and rule sets"
description: "Add rules in Potatso to route each site through a proxy, directly or nowhere, and install rule providers, community rule sets and GeoIP/GeoSite data."
---

> Documentation Index
> Fetch the complete documentation index at: https://potatso.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Rules and rule sets

Rules decide where each connection goes in Rule mode: through a proxy or proxy group, directly, or nowhere. Potatso uses Mihomo-style rules, so the rules from a Clash or Mihomo subscription work as they are.

Rules only apply in Rule mode. Global and Direct mode don't use them, and Smart mode uses its own rules. See [Outbound modes](/docs/guides/outbound-modes/) and [Smart Routing](/docs/guides/smart-routing/).

## Open your rules {#open}

On **Home**, tap **More Configurations**, then **Rules**.

## How rules are matched {#matching}

Rules are matched from top to bottom. Matching stops at the first rule that applies. Traffic that matches none of the rules uses the **Final** outbound, shown as **All Other Traffic** at the bottom of the list. Tap it to choose that outbound.

### Profiles from a subscription {#subscription}

When a profile comes from a subscription, its rules are listed in three parts:

| Section | Matched |
| --- | --- |
| **My Rules · Before Subscription** | First, so these take priority. |
| **From Subscription** | Next, in the subscription's own order. |
| **My Rules · After Subscription** | Only when none of the subscription's rules apply. |

Subscription rules keep their order and update with the subscription. Your own changes are re-applied automatically after each subscription update, and **More Configurations** lists them under **My Overrides**. The original subscription is never modified. To import a subscription, see [Import subscriptions](/docs/guides/import-subscriptions/).

## Add a rule {#add}

1. In **Rules**, tap **Add a Rule**.
2. Under **When Connecting To**, choose a rule type. Tap **More Types** for the full list.
3. Enter the value, such as `example.com`. When you add a domain rule, **From Recent Connections** suggests hosts your device connected to.
4. Tap **Route To** and choose a proxy, a proxy group, **Direct** or **Reject**.
5. For a subscription profile, choose **Position**: **Before Subscription Rules** or **After Subscription Rules**. Otherwise, choose **Top** or **Bottom**.
6. Tap **Add**.

The footer under the value says what the rule will match, and the rule line it will save, such as `DOMAIN-SUFFIX,example.com,DIRECT`.

To change a rule, tap it. To reorder or delete rules, tap **Edit Rules**.

## Rule types {#types}

| Type | Rule keyword | Matches |
| --- | --- | --- |
| **Domain Suffix** | `DOMAIN-SUFFIX` | A domain and all its subdomains. |
| **Domain** | `DOMAIN` | Only this exact domain. |
| **Domain Keyword** | `DOMAIN-KEYWORD` | Any domain that contains the keyword. |
| **Domain Wildcard** | `DOMAIN-WILDCARD` | Domains like `*.example.com`. `*` matches any characters and `?` matches one. |
| **Domain Regex** | `DOMAIN-REGEX` | Domains that match a regular expression. |
| **IP CIDR** | `IP-CIDR` | Destination IPv4 addresses in a range, such as `10.0.0.0/8`. |
| **IPv6 CIDR** | `IP-CIDR6` | Destination IPv6 addresses in a range, such as `fc00::/7`. |
| **IP Suffix** | `IP-SUFFIX` | The trailing bits of the destination IP. |
| **IP ASN** | `IP-ASN` | The network operator (AS number) of the destination IP. |
| **GeoIP** | `GEOIP` | The destination IP's country or region, such as `CN`. |
| **GeoSite** | `GEOSITE` | A domain category from GeoSite, such as `category-ads-all`. |
| **Destination Port** | `DST-PORT` | Ports or port ranges, such as `80/443/1000-2000`. |
| **Network** | `NETWORK` | All TCP or all UDP traffic. |
| **Rule Set** | `RULE-SET` | Everything in a [rule provider](#rule-providers). |

**Domain Suffix**, **Domain**, **Domain Keyword**, **IP CIDR** and **Rule Set** are listed first. The others are under **More Types**.

Under **Options**, **Network** limits a rule to TCP or UDP traffic. IP, GeoIP and Rule Set rules also have **No Resolve**, which keeps Potatso from resolving hostnames to match the rule.

## Rule providers {#rule-providers}

A rule provider is a list of domains or IP ranges that **Rule Set** rules use. Subscriptions often include them.

To add one:

1. On **Home**, tap **More Configurations**, then **Rule Providers**.
2. Tap **Add Rule Provider**.
3. Enter a **Name** and choose its **Type**: **HTTP** (downloaded from a URL), **File** or **Inline**.
4. Choose its **Behavior** (**Domain**, **IP CIDR** or **Classical**) and **Format** (**YAML**, **MRS** or **Text**).
5. For an HTTP provider, enter its **URL** and choose an **Update Interval**.
6. Tap **Save**.

Then [add a rule](#add) of type **Rule Set**, choose the provider and where it goes. A provider does nothing until a rule uses it.

Tap a provider to see how many rules it has loaded, update it with **Update Now**, or browse its rules. MRS is a compiled binary format, so its rules can't be listed.

## Community rule sets {#community}

**Rule Providers** also lists **Community Rules**, ready-made lists from these GitHub repositories:

- `Loyalsoldier/v2ray-rules-dat`
- `runetfreedom/russia-v2ray-rules-dat`
- `Chocolate4U/Iran-v2ray-rules`

Tap a repository, then tap **Install** next to a list, or **Install All**. The lists install into the current profile as rule providers. Add a **Rule Set** rule in **Rules** to choose how to use each list.

## GeoIP and GeoSite data {#geodata}

**GeoIP**, **IP ASN** and **GeoSite** rules use the GeoData databases that come with Potatso. They're shared by all profiles and updated from each database's GitHub releases.

To manage updates, open **Settings** and tap **GeoData**:

- **Automatic Updates** checks when the app opens and in the background. Choose how often under **Check Every**. Without **Use Cellular Data**, checks wait for Wi-Fi.
- **Check for Updates** checks now. This may use cellular data.

A downloaded version is used from the next connection. When one is ready while you're connected, tap **Apply Downloaded Version**.

Source: https://potatso.com/docs/guides/rules-and-rule-sets/index.mdx