iptables ipset 实用命令

iptables -t nat -L --line-numbers

iptables -D INPUT 3: 通过Chain Name(INPUT) 和 line number(3)来删除规则

iptables -t nat -I PREROUTING -m set --match-set myset src -m comment --comment "myset" -j return



ipset create myset hash:ip
ipset add myset 192.168.1.1

ipset create myset hash:ip
ipset add myset 192.168.2.226
iptables -t nat -I SS_SPEC_WAN_FW -m set --match-set myset src -m comment --comment "myset" -j RETURN
#在nat表的SS_SPEC_WAN_FW之前加入一个规则:遇到匹配myset的ip的跳过余下规则