diff --git a/ShellCrash.tar.gz b/ShellCrash.tar.gz
index f4a90714..10dec75d 100644
Binary files a/ShellCrash.tar.gz and b/ShellCrash.tar.gz differ
diff --git a/bin/clashfm.tar.gz b/bin/clashfm.tar.gz
index f4a90714..10dec75d 100644
Binary files a/bin/clashfm.tar.gz and b/bin/clashfm.tar.gz differ
diff --git a/bin/version b/bin/version
index a7d42be5..e5ea398f 100644
--- a/bin/version
+++ b/bin/version
@@ -1,4 +1,4 @@
 meta_v=v1.19.17
 singboxr_v=1.13.0-alpha.27
-versionsh=1.9.4alpha4
+versionsh=1.9.4alpha4.1
 GeoIP_v=20251205
diff --git a/scripts/starts/fw_nftables.sh b/scripts/starts/fw_nftables.sh
index a076e122..5ebc3b89 100644
--- a/scripts/starts/fw_nftables.sh
+++ b/scripts/starts/fw_nftables.sh
@@ -102,7 +102,10 @@ start_nft_route() { #nftables-route通用工具
     #nft add rule inet shellcrash local_tproxy log prefix \"pre\" level debug
 }
 start_nft_dns() { #nftables-dns
-	[ "$1" = 'prerouting' ] && HOST_IP=$(echo $host_ipv4 | sed 's/ /, /g')
+	[ "$1" = 'prerouting' ] && {
+		HOST_IP=$(echo $host_ipv4 | sed 's/ /, /g')
+		HOST_IP6=$(echo $host_ipv6 | sed 's/ /, /g')
+	}
     [ "$1" = 'output' ] && HOST_IP="127.0.0.0/8, $(echo $local_ipv4 | sed 's/ /, /g')"
     [ "$1" = 'prerouting_vm' ] && HOST_IP="$(echo $vm_ipv4 | sed 's/ /, /g')"
     nft add chain inet shellcrash "$1"_dns { type nat hook $2 priority -100 \; }
@@ -128,6 +131,8 @@ start_nft_dns() { #nftables-dns
     nft add rule inet shellcrash "$1"_dns tcp dport 53 redirect to ${dns_port}
 }
 start_nft_wan() { #nftables公网防火墙
+	HOST_IP=$(echo $host_ipv4 | sed 's/ /, /g')
+	HOST_IP6=$(echo $host_ipv6 | sed 's/ /, /g')
     nft add chain inet shellcrash input { type filter hook input priority -100 \; }
     nft add rule inet shellcrash input iif lo accept #本机请求全放行
 	#端口放行
diff --git a/version b/version
index bb14cbe4..5feab290 100644
--- a/version
+++ b/version
@@ -1 +1 @@
-1.9.4alpha4
+1.9.4alpha4.1