From 82ad171e7187c9657535270762b0b2545a71a7f1 Mon Sep 17 00:00:00 2001
From: C24Be <c@24.be>
Date: Tue, 24 Mar 2026 19:57:16 +0100
Subject: [PATCH] usage

---
 blacklists_updater_iptables.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/blacklists_updater_iptables.sh b/blacklists_updater_iptables.sh
index 6df881a..6bbfe1d 100755
--- a/blacklists_updater_iptables.sh
+++ b/blacklists_updater_iptables.sh
@@ -148,7 +148,9 @@ cat > "${iptables_vk_output_file}" << EOF
 #
 #   2. Use with iptables/ip6tables:
 #      iptables -I OUTPUT -m set --match-set blacklist-vk-v4 dst -j REJECT
+#      iptables -I FORWARD -m set --match-set blacklist-vk-v4 dst -j REJECT
 #      ip6tables -I OUTPUT -m set --match-set blacklist-vk-v6 dst -j REJECT
+#      ip6tables -I FORWARD -m set --match-set blacklist-vk-v6 dst -j REJECT
 #
 #   3. To flush/delete the sets:
 #      ipset flush blacklist-vk-v4 && ipset destroy blacklist-vk-v4
@@ -168,6 +170,8 @@ echo ""
 echo "VK outgoing block examples (iptables/ipset):"
 echo "  ipset restore < ${iptables_vk_output_file}"
 echo "  iptables -I OUTPUT -m set --match-set blacklist-vk-v4 dst -j REJECT"
+echo "  iptables -I FORWARD -m set --match-set blacklist-vk-v4 dst -j REJECT"
 echo "  ip6tables -I OUTPUT -m set --match-set blacklist-vk-v6 dst -j REJECT"
+echo "  ip6tables -I FORWARD -m set --match-set blacklist-vk-v6 dst -j REJECT"
 echo ""
 echo "Tip: Do not install Messenger MAX on the same phone/device that has VPN access configured."