规则如下

[General]
loglevel = verbose
encrypted-dns-server = https://doh.pub/dns-query, quic://223.5.5.5
ipv6 = false
ipv6-vif = off
bypass-system = true
show-error-page-for-reject = true
skip-proxy = 127.0.0.1,192.168.0.0/16,10.0.0.0/8,172.16.0.0/12,100.64.0.0/10,17.0.0.0/8,localhost,*.local,passenger.t3go.cn
bypass-tun = 10.0.0.0/8,100.64.0.0/10,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.0.0.0/24,192.0.2.0/24,192.88.99.0/24,192.168.0.0/16,198.18.0.0/15,198.51.100.0/24,203.0.113.0/24,224.0.0.0/4,255.255.255.255/32
hijack-dns = 8.8.8.8:53, 8.8.4.4:53, 1.0.0.9:53
doh-server = https://dns.alidns.com/dns-query, https://doh.pub/dns-query
replica = false
tls-provider = default
show-error-page-for-reject = true
exclude-simple-hostnames = true
internet-test-url = http://www.aliyun.com

[Rule]
PROCESS-NAME,v2ray,DIRECT
PROCESS-NAME,xray,DIRECT
PROCESS-NAME,clash,DIRECT
PROCESS-NAME,naive,DIRECT
PROCESS-NAME,trojan,DIRECT
PROCESS-NAME,trojan-go,DIRECT
PROCESS-NAME,ss-local,DIRECT
PROCESS-NAME,privoxy,DIRECT
PROCESS-NAME,leaf,DIRECT
PROCESS-NAME,Thunder,DIRECT
PROCESS-NAME,DownloadService,DIRECT
PROCESS-NAME,qBittorrent,DIRECT
PROCESS-NAME,Transmission,DIRECT
PROCESS-NAME,fdm,DIRECT
PROCESS-NAME,aria2c,DIRECT
PROCESS-NAME,Folx,DIRECT
PROCESS-NAME,NetTransport,DIRECT
PROCESS-NAME,uTorrent,DIRECT
PROCESS-NAME,WebTorrent,DIRECT
DOMAIN-SUFFIX,tracker.hdtime.org,DIRECT
DOMAIN-SUFFIX,pt.btschool.club,DIRECT
DOMAIN-SUFFIX,tracker.hhan.club,DIRECT
DOMAIN-SUFFIX,hhanclub.top,DIRECT
DOMAIN,tracker.hhanclub.top,DIRECT
DOMAIN-SUFFIX,tracker.m-team.cc,DIRECT
RULE-SET,https://cdn.jsdelivr.net/gh/Loyalsoldier/surge-rules@release/ruleset/direct.txt,DIRECT
DOMAIN-SET,https://ruleset.skk.moe/List/domainset/apple_cdn.conf,DIRECT
DOMAIN-SET,https://ruleset.skk.moe/List/domainset/download.conf,Smart
RULE-SET,https://cdn.jsdelivr.net/gh/Loyalsoldier/surge-rules@release/ruleset/proxy.txt,Smart,force-remote-dns
RULE-SET,https://ruleset.skk.moe/List/non_ip/ai.conf,PROXY
RULE-SET,https://ruleset.skk.moe/List/non_ip/telegram.conf,Smart
RULE-SET,https://ruleset.skk.moe/List/ip/telegram.conf,Smart
RULE-SET,https://ruleset.skk.moe/List/ip/telegram_asn.conf,Smart
RULE-SET,https://cdn.jsdelivr.net/gh/Loyalsoldier/surge-rules@release/ruleset/private.txt,DIRECT
RULE-SET,https://cdn.jsdelivr.net/gh/Loyalsoldier/surge-rules@release/ruleset/reject.txt,REJECT
RULE-SET,https://cdn.jsdelivr.net/gh/Loyalsoldier/surge-rules@release/ruleset/icloud.txt,DIRECT
RULE-SET,https://cdn.jsdelivr.net/gh/Loyalsoldier/surge-rules@release/ruleset/apple.txt,DIRECT
RULE-SET,https://cdn.jsdelivr.net/gh/Loyalsoldier/surge-rules@release/ruleset/google.txt,DIRECT
RULE-SET,https://cdn.jsdelivr.net/gh/Loyalsoldier/surge-rules@release/ruleset/telegramcidr.txt,Smart
RULE-SET,https://cdn.jsdelivr.net/gh/Loyalsoldier/surge-rules@release/ruleset/cncidr.txt,DIRECT
RULE-SET,LAN,DIRECT
RULE-SET,SYSTEM,DIRECT
FINAL,Smart

但是有些请求总是到FINAL，试过FINAL,Smart和FINAL,Smart,dns-failed都是一样。
对应的请求日志如下

16:59:37.849072 [Connection] Handled by VIF
16:59:37.849421 [TLS] TLS Client Hello SNI: tracker.hhanclub.top
16:59:37.854117 [Rule] Rule matched: FINAL
16:59:37.854731 [Connector] Set up connection #0 via Standard|新加坡|IEPL|01
16:59:37.858067 [DNS] Use cached DNS result for bs3.jymzffbquawl.com. A record count: 1, AAAA record count: 0
16:59:37.858196 [Socket] Use the last successful address: 59.42.247.243
16:59:37.858634 [Socket] Connecting with address: 59.42.247.243
16:59:37.904229 [Socket] Connected to address 59.42.247.243 in 45.5ms
16:59:37.904445 [Connector] TCP connection established
16:59:39.038484 [Connection] Client closed sending stream
16:59:39.038741 [Connection] Remote closed sending stream
16:59:39.038897 [Connection] Disconnect: Connection closed

实在不知道为什么到final了。