From aa35b7012f922cac229fd90f919019c1610c00ca Mon Sep 17 00:00:00 2001
From: salem <77879189@qq.com>
Date: Sun, 6 Sep 2026 20:02:31 +0800
Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20=E9=98=B2=E7=81=AB?=
 =?UTF-8?q?=E5=A2=99.MD?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 防火墙.MD | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/防火墙.MD b/防火墙.MD
index ff48c90..05fcfe7 100644
--- a/防火墙.MD
+++ b/防火墙.MD
@@ -13,17 +13,17 @@ ipset create cn_ip hash:net family inet hashsize 1024 maxelem 65536
 ~~~
 3. 获取中国大陆 IP 网段并导入 ipset
 ~~~
-##### 清空旧集合
+# 清空旧集合
 ipset flush cn_ip
-#### 下载cn网段列表写入ipset
+# 下载cn网段列表写入ipset
 curl -s https://ftp.apnic.net/stats/apnic/delegated-apnic-latest | awk -F'|' '$2=="CN"&&$3=="ipv4"{printf("add cn_ip %s/%d\n",$4,32-log($5)/log(2))}' | ipset restore
 ~~~
 ⚠️网络不好时 curl 会失败，可以把文件下载到本地再导入。
 4. iptables 规则：拒绝 cn_ip 集合访问本机 40000‑50000 TCP/UDP
 ~~~
-#### TCP
+# TCP
 iptables -A INPUT -m set --match-set cn_ip src -p tcp --dport 40000:50000 -j DROP
-##### UDP
+# UDP
 iptables -A INPUT -m set --match-set cn_ip src -p udp --dport 40000:50000 -j DROP
 
 ~~~
\ No newline at end of file