diff --git a/openmptcprouter/files/etc/uci-defaults/1940-omr-dns b/openmptcprouter/files/etc/uci-defaults/1940-omr-dns
index 51839e783..290152c1f 100755
--- a/openmptcprouter/files/etc/uci-defaults/1940-omr-dns
+++ b/openmptcprouter/files/etc/uci-defaults/1940-omr-dns
@@ -3,6 +3,7 @@
 uci -q batch <<-EOF >/dev/null
 	set unbound.@unbound[-1].listen_port=5353
 	set unbound.@unbound[-1].protocol="ip4_only"
+	set unbound.@unbound[-1].enabled="0"
 	commit unbound
 	add_list dhcp.@dnsmasq[-1].server="127.0.0.1#5353"
 	commit dhcp
diff --git a/shadowsocks-libev/files/shadowsocks-libev.config b/shadowsocks-libev/files/shadowsocks-libev.config
index 580df0c72..07ee68cf7 100644
--- a/shadowsocks-libev/files/shadowsocks-libev.config
+++ b/shadowsocks-libev/files/shadowsocks-libev.config
@@ -1,5 +1,4 @@
 config ss_redir hi
-	option disabled 1
 	option server 'sss0'
 	option local_address '::'
 	option local_port '1100'
@@ -11,7 +10,7 @@ config ss_redir hi
 	option mptcp 1
 
 config ss_rules 'ss_rules'
-	option disabled 1
+	option disabled 0
 	option redir_tcp 'hi'
 	option redir_udp 'hi'
 	option src_default 'forward'
@@ -25,3 +24,10 @@ config server 'sss0'
 	option server_port '65101'
 	option key '************'
 	option method 'aes-256-cfb'
+
+config ss_tunnel 'dns'
+	option disabled 0
+	option mode 'tcp_and_udp'
+	option server 'sss0'
+	option local_port '5353'
+	option tunnel_address '8.8.8.8:53'
\ No newline at end of file