设置 rule 5 permit ip so 192.168.1.2 0.0.0.0 destination 192.168.2.1 0.0.0.0rule 10 permit ip so 192.168.1.3 0.0.0.0 destination 192.168.2.1 0.0.0.0rule 15 deny ip so 192.168.1.0 0.0.0.255 destination 192.168.2.1 0.0.0.0即可