请问 sing-box 的 route.rules 如何写，可以指定内网的 IP/MAC 地址走到对应的 outbound?

如题。

我这样写并不生效：

  "route": {
    "rules": [
      {
        "protocol": "dns",
        "action": "hijack-dns"
      },
      {
        "source_ip_cidr": [
          "192.168.2.41/32",
        ],
        "outbound": "proxy1"
      },
      {
        "ip_is_private": true,
        "outbound": "direct"
      },
      {
        "rule_set": [
          "geosite-cn",
          "geoip-cn"
        ],
        "outbound": "direct"
      }
    ],
    "rule_set": [
      ...