iptables -t nat -L --line-numbers
iptables -D INPUT 3: 通过Chain Name(INPUT) 和 line number(3)来删除规则
iptables -t nat -I PREROUTING -m set --match-set myset src -m comment --comment "myset" -j return
ipset create myset hash:ip
ipset add myset 192.168.1.1
ipset create myset hash:ip
ipset add myset 192.168.2.226
iptables -t nat -I SS_SPEC_WAN_FW -m set --match-set myset src -m comment --comment "myset" -j RETURN
#在nat表的SS_SPEC_WAN_FW之前加入一个规则:遇到匹配myset的ip的跳过余下规则