diff --git a/docs/en_US/guide/pve_kvm.md b/docs/en_US/guide/pve_kvm.md
index 26589db9dc..5686c7ad5e 100644
--- a/docs/en_US/guide/pve_kvm.md
+++ b/docs/en_US/guide/pve_kvm.md
@@ -120,13 +120,9 @@ qm stop 102
 qm destroy 102
 iptables -t nat -F
 iptables -t filter -F
-iptables -t nat -A POSTROUTING -s 172.16.1.0/24 -j MASQUERADE
-ip6tables -t nat -F
-ip6tables -t nat -A POSTROUTING -s 2001:db8:1::/64 -j MASQUERADE
-iptables-save > /etc/iptables/rules.v4
-ip6tables-save > /etc/iptables/rules.v6
 service networking restart
 systemctl restart networking.service
+iptables-save | awk '!seen[$0]++' | iptables-restore
 rm -rf vm102
 ```
 
@@ -167,13 +163,9 @@ After the setup is completed, you can execute ```cat vmlog``` to view the inform
 for vmid in $(qm list | awk '{if(NR>1) print $1}'); do qm stop $vmid; qm destroy $vmid; rm -rf /var/lib/vz/images/$vmid*; done
 iptables -t nat -F
 iptables -t filter -F
-iptables -t nat -A POSTROUTING -s 172.16.1.0/24 -j MASQUERADE
-ip6tables -t nat -F
-ip6tables -t nat -A POSTROUTING -s 2001:db8:1::/64 -j MASQUERADE
-iptables-save > /etc/iptables/rules.v4
-ip6tables-save > /etc/iptables/rules.v6
 service networking restart
 systemctl restart networking.service
+iptables-save | awk '!seen[$0]++' | iptables-restore
 rm -rf vmlog
 rm -rf vm*
 ```
diff --git a/docs/en_US/guide/pve_lxc.md b/docs/en_US/guide/pve_lxc.md
index ee6ea46851..0f09ee0328 100644
--- a/docs/en_US/guide/pve_lxc.md
+++ b/docs/en_US/guide/pve_lxc.md
@@ -92,13 +92,9 @@ pct destroy 102
 rm -rf ct102
 iptables -t nat -F
 iptables -t filter -F
-iptables -t nat -A POSTROUTING -s 172.16.1.0/24 -j MASQUERADE
-ip6tables -t nat -F
-ip6tables -t nat -A POSTROUTING -s 2001:db8:1::/64 -j MASQUERADE
-iptables-save > /etc/iptables/rules.v4
-ip6tables-save > /etc/iptables/rules.v6
 service networking restart
 systemctl restart networking.service
+iptables-save | awk '!seen[$0]++' | iptables-restore
 ```
 
 ## Batch Creation of LXC Containers with NAT
@@ -138,13 +134,9 @@ pct list | awk 'NR>1{print $1}' | xargs -I {} sh -c 'pct stop {}; pct destroy {}
 rm -rf ct*
 iptables -t nat -F
 iptables -t filter -F
-iptables -t nat -A POSTROUTING -s 172.16.1.0/24 -j MASQUERADE
-ip6tables -t nat -F
-ip6tables -t nat -A POSTROUTING -s 2001:db8:1::/64 -j MASQUERADE
-iptables-save > /etc/iptables/rules.v4
-ip6tables-save > /etc/iptables/rules.v6
 service networking restart
 systemctl restart networking.service
+iptables-save | awk '!seen[$0]++' | iptables-restore
 ```
 
 ## Creating Virtual Machines with Pure IPv6 Addresses
diff --git a/docs/guide/pve_kvm.md b/docs/guide/pve_kvm.md
index cda91eb705..264e0a1d8f 100644
--- a/docs/guide/pve_kvm.md
+++ b/docs/guide/pve_kvm.md
@@ -135,13 +135,9 @@ qm stop 102
 qm destroy 102
 iptables -t nat -F
 iptables -t filter -F
-iptables -t nat -A POSTROUTING -s 172.16.1.0/24 -j MASQUERADE
-ip6tables -t nat -F
-ip6tables -t nat -A POSTROUTING -s 2001:db8:1::/64 -j MASQUERADE
-iptables-save > /etc/iptables/rules.v4
-ip6tables-save > /etc/iptables/rules.v6
 service networking restart
 systemctl restart networking.service
+iptables-save | awk '!seen[$0]++' | iptables-restore
 rm -rf vm102
 ```
 
@@ -189,13 +185,9 @@ curl -L https://ghproxy.com/https://raw.githubusercontent.com/spiritLHLS/pve/mai
 for vmid in $(qm list | awk '{if(NR>1) print $1}'); do qm stop $vmid; qm destroy $vmid; rm -rf /var/lib/vz/images/$vmid*; done
 iptables -t nat -F
 iptables -t filter -F
-iptables -t nat -A POSTROUTING -s 172.16.1.0/24 -j MASQUERADE
-ip6tables -t nat -F
-ip6tables -t nat -A POSTROUTING -s 2001:db8:1::/64 -j MASQUERADE
-iptables-save > /etc/iptables/rules.v4
-ip6tables-save > /etc/iptables/rules.v6
 service networking restart
 systemctl restart networking.service
+iptables-save | awk '!seen[$0]++' | iptables-restore
 rm -rf vmlog
 rm -rf vm*
 ```
diff --git a/docs/guide/pve_lxc.md b/docs/guide/pve_lxc.md
index 371058242c..03cf9bf6ce 100644
--- a/docs/guide/pve_lxc.md
+++ b/docs/guide/pve_lxc.md
@@ -96,13 +96,9 @@ pct destroy 102
 rm -rf ct102
 iptables -t nat -F
 iptables -t filter -F
-iptables -t nat -A POSTROUTING -s 172.16.1.0/24 -j MASQUERADE
-ip6tables -t nat -F
-ip6tables -t nat -A POSTROUTING -s 2001:db8:1::/64 -j MASQUERADE
-iptables-save > /etc/iptables/rules.v4
-ip6tables-save > /etc/iptables/rules.v6
 service networking restart
 systemctl restart networking.service
+iptables-save | awk '!seen[$0]++' | iptables-restore
 ```
 
 ## 批量开设NAT的LXC虚拟化的CT
@@ -149,13 +145,9 @@ pct list | awk 'NR>1{print $1}' | xargs -I {} sh -c 'pct stop {}; pct destroy {}
 rm -rf ct*
 iptables -t nat -F
 iptables -t filter -F
-iptables -t nat -A POSTROUTING -s 172.16.1.0/24 -j MASQUERADE
-ip6tables -t nat -F
-ip6tables -t nat -A POSTROUTING -s 2001:db8:1::/64 -j MASQUERADE
-iptables-save > /etc/iptables/rules.v4
-ip6tables-save > /etc/iptables/rules.v6
 service networking restart
 systemctl restart networking.service
+iptables-save | awk '!seen[$0]++' | iptables-restore
 ```
 
 ## 开设纯IPV6地址的虚拟机