New requirement: Need all purpose ACL in configuration

I've got this problem: my ISP blocks access to any destinations' port 25, so my SMTP delivery server doesn't work. With the help of proxychains-ng the server can work well via outside proxy servers, but I cannot precisely define that only non-localnet:25 should be proxied. In fact the current configuration's rule is "proxy_all" except the "localnet". For precise control, we need all purpose ACL rules like this: https://github.com/shadowsocks/shadowsocks-rust?tab=readme-ov-file#acl

That is:

• Modes:
  • [bypass_all] - ACL runs in BlackList mode. Bypasses all addresses that didn't match any rules.
  • [proxy_all] - ACL runs in WhiteList mode. Proxies all addresses that didn't match any rules.
• Rules:
  • [bypass_list] - Rules for connecting directly
  • [proxy_list] - Rules for connecting through proxies

--
Looking forward eagerly to this new upgrade! Thanks!

Start by reading the issue requirements and the referenced shadowsocks-rust ACL documentation. Identify where proxychains-ng currently applies the proxy_all and localnet rules, then determine how bypass_all, proxy_all, bypass_list, and proxy_list should be represented in configuration. Done means non-local port 25 traffic can be proxied while explicitly bypassed addresses connect directly, with existing behavior preserved.