diff --git a/install.sh b/install.sh
index 61575c6..6896b6a 100644
--- a/install.sh
+++ b/install.sh
@@ -138,6 +138,7 @@ install_base_packages() {
     install_package sudo
     install_package unzip
     install_package iptables-persistent
+    install_package nftables
     install_package nginx
     
     if dpkg -l lxcfs 2>/dev/null | grep -q "^ii"; then
diff --git a/update.sh b/update.sh
index 76b9651..5b817dc 100644
--- a/update.sh
+++ b/update.sh
@@ -32,6 +32,13 @@ check_environment() {
         err "未检测到配置文件: $CONFIG_FILE"
     fi
     
+    if ! command -v nft &>/dev/null; then
+        info "安装 nftables..."
+        apt-get update >/dev/null 2>&1
+        apt-get install -y nftables >/dev/null 2>&1
+        ok "nftables 已安装"
+    fi
+    
     ok "环境检测通过"
 }