#安装字符串模块


opkg update
pkg install iptables-mod-filter


iptables -I FORWARD -m mac --mac-source 88:88:88:88:87:88 -p tcp --dport 80  -j DROP
iptables -I FORWARD -m mac --mac-source 88:88:88:88:87:88 -p tcp --dport 443 -j DROP
iptables -m string --string "yuanfudao.com" --algo bm -I FORWARD -j ACCEPT

#删除
iptables -L FORWARD --line-numbers 先查出
iptables -D FORWARD 1 //删除第N条
