Logical Combination Rule

Chute supports logical combination rules: AND, OR, and NOT. These rules can combine multiple sub-rules to create complex matching conditions.

AND

Rule matches only when all sub-rules match.

Syntax: AND,((SUB-RULE),(SUB-RULE),...),POLICY

AND,((DOMAIN,example.com),(DEST-PORT,443)),Proxy
AND,((DOMAIN-SUFFIX,google.com),(GEOIP,US)),DIRECT

Each sub-rule is exactly TYPE,VALUE — the same syntax as a regular rule, but without the policy. Trailing options such as no-resolve are not supported inside sub-rules.

OR

Rule matches when any sub-rule matches.

Syntax: OR,((SUB-RULE),(SUB-RULE),...),POLICY

OR,((DOMAIN,example.com),(DOMAIN,test.com)),Proxy
OR,((DOMAIN-SUFFIX,apple.com),(DOMAIN-SUFFIX,icloud.com)),DIRECT

NOT

Rule matches when the sub-rule does NOT match.

Syntax: NOT,((SUB-RULE)),POLICY

NOT,((DOMAIN,example.com)),Proxy

Note: The sub-rules are enclosed in double parentheses ((...)). RULE-SET and DOMAIN-SET cannot be used as sub-rules of AND/OR/NOT; only leaf rule types are allowed.