Safewoo checks the rules below in order and uses the first one that matches to decide whether traffic goes through the VPN or connects directly.
RuleRouteWhat it is
Ports 6881–6889DirectUsed by torrent and file-sharing clients; direct for speed
Port 25DirectStandard outgoing email (SMTP); direct for mail servers
Port 465DirectSecure SMTP (legacy SSL); direct for mail
Port 107DirectA legacy service port, direct for compatibility
Port 194DirectA legacy service port, direct when needed
Port 587DirectEmail submission; lets mail clients send reliably
Port 992DirectA secure legacy service port, direct for compatibility
Port 2525DirectAlternative SMTP submission port used by some providers
Port 6969DirectCommon BitTorrent tracker port; direct to avoid proxy abuse
Port 51413DirectDefault peer port of Transmission
Local network (LAN)DirectKeeps devices on your local network reachable
China IPsDirectChina-local services use a direct path
Private groupDirectPrivate and internal destinations
iCloud / Apple groupsDirectApple services, for reliability
Direct groupDirectDestinations that always connect directly
LAN CIDR / CN CIDR groupsDirectIP ranges of local or China networks
Proxy groupVPNDestinations that always go through the VPN
GFW groupVPNDestinations blocked from your location stay reachable
Telegram CIDR groupVPNTelegram IP ranges
FallbackVPNAnything not matched above goes through the VPN
If you need an app or site to always use a direct or VPN connection, contact support and we can set up a custom route.