diff --git a/config/client/h2.json b/config/client/h2.json
index debbfac..1133c48 100644
--- a/config/client/h2.json
+++ b/config/client/h2.json
@@ -36,6 +36,11 @@
             "settings": {},
             "tag": "direct"
         },
+        {
+			"protocol": "blackhole",
+			"settings": {},
+			"tag": "blocked"
+        },
         {
             "protocol": "dns",
             "tag": "dns-out"
@@ -105,10 +110,16 @@
                 ],
                 "outboundTag": "dns-out"
             },
+            {
+				"type": "field",
+				"ip": [
+					"geoip:private"
+				],
+				"outboundTag": "blocked"
+			},
             {
                 "type": "field",
                 "ip": [
-                    "geoip:private",
                     "geoip:cn"
                 ],
                 "outboundTag": "direct"
diff --git a/config/client/http.json b/config/client/http.json
index dc92e1f..bf33a8d 100644
--- a/config/client/http.json
+++ b/config/client/http.json
@@ -66,6 +66,11 @@
             "settings": {},
             "tag": "direct"
         },
+        {
+			"protocol": "blackhole",
+			"settings": {},
+			"tag": "blocked"
+        },
         {
             "protocol": "dns",
             "tag": "dns-out"
@@ -135,10 +140,16 @@
                 ],
                 "outboundTag": "dns-out"
             },
+            {
+				"type": "field",
+				"ip": [
+					"geoip:private"
+				],
+				"outboundTag": "blocked"
+			},
             {
                 "type": "field",
                 "ip": [
-                    "geoip:private",
                     "geoip:cn"
                 ],
                 "outboundTag": "direct"
diff --git a/config/client/kcp.json b/config/client/kcp.json
index 477dac7..0ff2f09 100644
--- a/config/client/kcp.json
+++ b/config/client/kcp.json
@@ -37,6 +37,11 @@
             "settings": {},
             "tag": "direct"
         },
+        {
+			"protocol": "blackhole",
+			"settings": {},
+			"tag": "blocked"
+        },
         {
             "protocol": "dns",
             "tag": "dns-out"
@@ -106,10 +111,16 @@
                 ],
                 "outboundTag": "dns-out"
             },
+            {
+				"type": "field",
+				"ip": [
+					"geoip:private"
+				],
+				"outboundTag": "blocked"
+			},
             {
                 "type": "field",
                 "ip": [
-                    "geoip:private",
                     "geoip:cn"
                 ],
                 "outboundTag": "direct"
diff --git a/config/client/quic.json b/config/client/quic.json
index 7bef3fa..8dde17c 100644
--- a/config/client/quic.json
+++ b/config/client/quic.json
@@ -36,6 +36,11 @@
             "settings": {},
             "tag": "direct"
         },
+        {
+			"protocol": "blackhole",
+			"settings": {},
+			"tag": "blocked"
+        },
         {
             "protocol": "dns",
             "tag": "dns-out"
@@ -105,10 +110,16 @@
                 ],
                 "outboundTag": "dns-out"
             },
+            {
+				"type": "field",
+				"ip": [
+					"geoip:private"
+				],
+				"outboundTag": "blocked"
+			},
             {
                 "type": "field",
                 "ip": [
-                    "geoip:private",
                     "geoip:cn"
                 ],
                 "outboundTag": "direct"
diff --git a/config/client/tcp.json b/config/client/tcp.json
index 96b377e..06e4774 100644
--- a/config/client/tcp.json
+++ b/config/client/tcp.json
@@ -26,6 +26,11 @@
             "settings": {},
             "tag": "direct"
         },
+        {
+			"protocol": "blackhole",
+			"settings": {},
+			"tag": "blocked"
+        },
         {
             "protocol": "dns",
             "tag": "dns-out"
@@ -95,10 +100,16 @@
                 ],
                 "outboundTag": "dns-out"
             },
+            {
+				"type": "field",
+				"ip": [
+					"geoip:private"
+				],
+				"outboundTag": "blocked"
+			},
             {
                 "type": "field",
                 "ip": [
-                    "geoip:private",
                     "geoip:cn"
                 ],
                 "outboundTag": "direct"
diff --git a/config/client/ws.json b/config/client/ws.json
index 3189143..f4d3d0e 100644
--- a/config/client/ws.json
+++ b/config/client/ws.json
@@ -29,6 +29,11 @@
             "settings": {},
             "tag": "direct"
         },
+        {
+			"protocol": "blackhole",
+			"settings": {},
+			"tag": "blocked"
+        },
         {
             "protocol": "dns",
             "tag": "dns-out"
@@ -98,10 +103,16 @@
                 ],
                 "outboundTag": "dns-out"
             },
+            {
+				"type": "field",
+				"ip": [
+					"geoip:private"
+				],
+				"outboundTag": "blocked"
+			},
             {
                 "type": "field",
                 "ip": [
-                    "geoip:private",
                     "geoip:cn"
                 ],
                 "outboundTag": "direct"
diff --git a/config/client/ws_tls.json b/config/client/ws_tls.json
index 163fc51..757a882 100644
--- a/config/client/ws_tls.json
+++ b/config/client/ws_tls.json
@@ -39,6 +39,11 @@
             "settings": {},
             "tag": "direct"
         },
+        {
+			"protocol": "blackhole",
+			"settings": {},
+			"tag": "blocked"
+        },
         {
             "protocol": "dns",
             "tag": "dns-out"
@@ -108,10 +113,16 @@
                 ],
                 "outboundTag": "dns-out"
             },
+            {
+				"type": "field",
+				"ip": [
+					"geoip:private"
+				],
+				"outboundTag": "blocked"
+			},
             {
                 "type": "field",
                 "ip": [
-                    "geoip:private",
                     "geoip:cn"
                 ],
                 "outboundTag": "direct"
diff --git a/v2ray.sh b/v2ray.sh
index e62861c..a6eea0d 100644
--- a/v2ray.sh
+++ b/v2ray.sh
@@ -10,7 +10,7 @@ none='\e[0m'
 # Root
 [[ $(id -u) != 0 ]] && echo -e " 哎呀……请使用 ${red}root ${none}用户运行 ${yellow}~(^_^) ${none}" && exit 1
 
-_version="v3.12"
+_version="v3.13"
 
 cmd="apt-get"