diff --git a/service/src/main/java/com/github/kr328/clash/service/TunService.kt b/service/src/main/java/com/github/kr328/clash/service/TunService.kt
index 9969faf..f4e5f4b 100644
--- a/service/src/main/java/com/github/kr328/clash/service/TunService.kt
+++ b/service/src/main/java/com/github/kr328/clash/service/TunService.kt
@@ -18,8 +18,8 @@ class TunService : VpnService(), IClashEventObserver {
         // from https://github.com/shadowsocks/shadowsocks-android/blob/master/core/src/main/java/com/github/shadowsocks/bg/VpnService.kt
         private const val VPN_MTU = 1500
         private const val PRIVATE_VLAN4_SUBNET = 30
-        private const val PRIVATE_VLAN4_CLIENT = "172.255.255.253"
-        private const val PRIVATE_VLAN_DNS = "172.255.255.254"
+        private const val PRIVATE_VLAN4_CLIENT = "172.31.255.253"
+        private const val PRIVATE_VLAN_DNS = "172.31.255.254"
         private const val VLAN4_ANY = "0.0.0.0"
     }
 
diff --git a/service/src/main/res/values/arrays.xml b/service/src/main/res/values/arrays.xml
index 79f4af4..97ae10f 100644
--- a/service/src/main/res/values/arrays.xml
+++ b/service/src/main/res/values/arrays.xml
@@ -18,7 +18,6 @@
         <item>160.0.0.0/5</item>
         <item>168.0.0.0/6</item>
         <item>172.0.0.0/12</item>
-        <item>172.19.0.0/30</item>
         <item>172.32.0.0/11</item>
         <item>172.64.0.0/10</item>
         <item>172.128.0.0/9</item>
@@ -67,6 +66,7 @@
         <item>255.255.255.248/30</item>
         <item>255.255.255.252/31</item>
         <item>255.255.255.254/32</item>
+        <item>172.31.255.252/30</item> <!-- tun device address -->
     </string-array>
 
     <string-array name="default_disallow_application">