[Feature]

1.Add Network rule, match network type(TCP/UDP)
2.Add logic rules(NOT,OR,AND)
-AND,((DOMAIN,baidu.com),(NETWORK,UDP)),REJECT

(cherry picked from commit d7092e2e37f2c48282c878edea1b2ebc2912b09a)

rule/common/process.go

@@ -0,0 +1,83 @@
+package common
+
+import (
+	"fmt"
+	"strconv"
+	"strings"
+
+	"github.com/Dreamacro/clash/common/cache"
+	"github.com/Dreamacro/clash/component/process"
+	C "github.com/Dreamacro/clash/constant"
+	"github.com/Dreamacro/clash/log"
+)
+
+var processCache = cache.NewLRUCache(cache.WithAge(2), cache.WithSize(64))
+
+type Process struct {
+	adapter   string
+	process   string
+	ruleExtra *C.RuleExtra
+}
+
+func (ps *Process) RuleType() C.RuleType {
+	return C.Process
+}
+
+func (ps *Process) Match(metadata *C.Metadata) bool {
+	if metadata.Process != "" {
+		return strings.EqualFold(metadata.Process, ps.process)
+	}
+	// ignore match in proxy type "tproxy"
+	//if metadata.Type == C.TPROXY || !C.AutoIptables {
+
+	if C.AutoIptables == "Enable" {
+		return false
+	}
+
+	key := fmt.Sprintf("%s:%s:%s", metadata.NetWork.String(), metadata.SrcIP.String(), metadata.SrcPort)
+	cached, hit := processCache.Get(key)
+	if !hit {
+		srcPort, err := strconv.Atoi(metadata.SrcPort)
+		if err != nil {
+			processCache.Set(key, "")
+			return false
+		}
+
+		name, err := process.FindProcessName(metadata.NetWork.String(), metadata.SrcIP, srcPort)
+		if err != nil {
+			log.Debugln("[Rule] find process name %s error: %s", C.Process.String(), err.Error())
+		}
+
+		processCache.Set(key, name)
+
+		cached = name
+	}
+
+	metadata.Process = cached.(string)
+
+	return strings.EqualFold(metadata.Process, ps.process)
+}
+
+func (ps *Process) Adapter() string {
+	return ps.adapter
+}
+
+func (ps *Process) Payload() string {
+	return ps.process
+}
+
+func (ps *Process) ShouldResolveIP() bool {
+	return false
+}
+
+func (ps *Process) RuleExtra() *C.RuleExtra {
+	return ps.ruleExtra
+}
+
+func NewProcess(process string, adapter string, ruleExtra *C.RuleExtra) (*Process, error) {
+	return &Process{
+		adapter:   adapter,
+		process:   process,
+		ruleExtra: ruleExtra,
+	}, nil
+}