rm china.txt
curl https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/ip2location_country/ip2location_country_cn.netset >china.txt
my_file=$(cat china.txt |grep -v "#")
/sbin/ipset -q flush china
/sbin/ipset -q create china hash:net
for row_data in $my_file; do /sbin/ipset add china ${row_data}; done
##/sbin/iptables -A DOCKER-USER -i eth0 -m set --match-set china src -j DROP
##/sbin/iptables -I INPUT -m set --match-set china src -j DROP
##/sbin/iptables -A FORWARD -p tcp --dport 443 -m set --match-set china dst -j DROP
##/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set china dst -j DROP