diff --git a/apps/frps/scripts/config.sh b/apps/frps/scripts/config.sh
index 2e671fa..d6d9e5f 100644
--- a/apps/frps/scripts/config.sh
+++ b/apps/frps/scripts/config.sh
@@ -18,6 +18,7 @@ if [ "$enable" == '1' ]; then
 		readsh "请输入${appname}的kcp配置[1/0]" "kcp" "1"
 		readsh "请输入${appname}用于http穿透的端口号" "http_port" "90"
 		readsh "请输入${appname}用于https穿透的端口号" "https_port" "91"
+		readsh "请输入${appname}用于tcp的端口号" "allow_tcp_ports" "10001-11000"
 		readsh "请输入${appname}访问密钥" "token" "12345678"
 		readsh "请输入${appname}子域名" "subdomain" 
 		read -p "是否启用${appname}的web控制面板？[1/0] " res
diff --git a/apps/frps/scripts/frps.sh b/apps/frps/scripts/frps.sh
index 1f50f33..1d1ef35 100644
--- a/apps/frps/scripts/frps.sh
+++ b/apps/frps/scripts/frps.sh
@@ -9,6 +9,7 @@ open_ports() {
     [ -n "$http_port" ] && open_port $http_port
     [ -n "$https_port" ] && open_port $https_port
     [ -n "$dashboard_port" ] && open_port $dashboard_port
+    [ -n "$allow_tcp_ports" ] && open_port ${allow_tcp_ports//-/:}
 }
 
 start() {
@@ -39,6 +40,7 @@ token = $token
 #max_ports_per_client = 0
 #authentication_timeout = 900
 `[ -n "$subdomain" ] && echo "subdomain_host = $subdomain"`
+`[ -n "$allow_tcp_ports" ] && echo "allow_ports = $allow_tcp_ports"`
 tcp_mux = true
 EOF
 	daemon ${mbroot}/apps/${appname}/bin/${appname} -c ${mbroot}/apps/${appname}/config/${appname}.conf