# General & Simple Mode

## `[misc]`

This section contains miscellaneous system-level settings.

| Key | Type | Description | Default |
|---|---|---|---|
| `tun-mtu` | Integer | The MTU for the TUN interface. | |
| `exclude-lan-networks` | Boolean | If `true`, local area networks will be excluded from the VPN. | `false` |
| `log-level` | String | Runtime logging level; use the app's supported choices. | |

**Example:**
```ini
[misc]
tun-mtu=1420
exclude-lan-networks=true
```

## `[simple-mode]`

Select one typed output for ordinary client traffic. Saved advanced routing rules remain available when returning to Rules Mode; Simple Mode does not erase them.

```ini
[simple-mode]
enabled=true
output=type:DIRECT
```

For a configured VPN use `output=type:L3VPN,target:my-wireguard`; for a proxy use `output=type:L4PROXY,target:my-proxy`. The target must exist and be usable under the current entitlement. An unauthenticated Tailscale interface may temporarily use Direct during enrollment; inspect Tailscale status before treating it as protected. See the [Tailscale FAQ](../faq/tailscale.md).