diff --git a/.github/workflows/r1s_lean.yml b/.github/workflows/r1s_lean.yml
index 048c953..b52b6f2 100644
--- a/.github/workflows/r1s_lean.yml
+++ b/.github/workflows/r1s_lean.yml
@@ -66,8 +66,8 @@ jobs:
           CONFIG_PACKAGE_luci-theme-argon=y
           CONFIG_PACKAGE_luci-theme-material=y
           CONFIG_PACKAGE_luci-theme-netgear=y
-          # CONFIG_OPENSSL_ENGINE_BUILTIN_DEVCRYPTO is not set' >> configs/config_h5
-          # CONFIG_V2RAY_COMPRESS_UPX is not set
+          # CONFIG_OPENSSL_ENGINE_BUILTIN_DEVCRYPTO is not set
+          # CONFIG_V2RAY_COMPRESS_UPX is not set' >> configs/config_h5
           cd friendlywrt
           git config --local user.email "action@github.com" && git config --local user.name "GitHub Action"
           git remote add upstream https://github.com/coolsnowwolf/lede && git fetch upstream
@@ -75,6 +75,7 @@ jobs:
           git checkout upstream/master -- feeds.conf.default
           git apply ../../0001-fix-upx.patch
           sed -i '/exit/i\echo "iptables -t nat -I POSTROUTING -j MASQUERADE" >> /etc/firewall.user' package/lean/default-settings/files/zzz-default-settings
+          sed -i 's/option fullcone	1/option fullcone	0/' package/network/config/firewall/files/firewall.config
           
       - name: Clean Feeds
         run: |