如果使用 OpenWrt 的，可以试试下面这一段小脚本屏蔽所有目的地非大陆内的 http(s) ipv6 流量
```
# Reject (!china_ip) && (dst_ip == 80 || dst_ip == 443)
curl
http://ftp.apnic.net/apnic/stats/apnic/delegated-apnic-latest > /tmp/delegated-apnic-latest
cat /tmp/delegated-apnic-latest | awk -F\| '/CN\|ipv6/ { printf("%s/%d\n", $4, $5) }' > /etc/china_and_reserved_ipv6
rm /tmp/delegated-apnic-latest
cat << 'EOF3' >> /etc/firewall.user
ipset -! restore << EOF
create china_and_reserved_ipv6 hash:net family inet6
$(cat << EOF2 | sed -e "s/^/add china_and_reserved_ipv6 /"
::/128
::1/128
::ffff:0:0/96
::ffff:0:0:0/96
64:ff9b::/96
100::/64
2001::/32
2001:20::/28
2001:db8::/32
2002::/16
fc00::/7
fe80::/10
ff00::/8
EOF2
)
$(sed -e "s/^/add china_and_reserved_ipv6 /" /etc/china_and_reserved_ipv6)
EOF
ip6tables -A output_rule -m set ! --match-set china_and_reserved_ipv6 dst -p tcp --dport 80 -j REJECT
ip6tables -A output_rule -m set ! --match-set china_and_reserved_ipv6 dst -p tcp --dport 443 -j REJECT
ip6tables -A forwarding_lan_rule -m set ! --match-set china_and_reserved_ipv6 dst -p tcp --dport 80 -j REJECT
ip6tables -A forwarding_lan_rule -m set ! --match-set china_and_reserved_ipv6 dst -p tcp --dport 443 -j REJECT
EOF3
/etc/init.d/firewall restart
```