1
2
3
4
5
6

ipset -N -! gfwlist hash:net  
ip route add default via 10.0.10.1 dev tinc0 table 201  
ip rule add fwmark 3 table 201  
ip route flush cache  
iptables -t mangle -I PREROUTING -m set -match-set gfwlist dst -j MARK -set-mark 3  
iptables -t mangle -I OUTPUT -m set -match-set gfwlist dst -j MARK -set-mark 3