ipset add blacklistip 117.6.25.106
nft add element inet filter blacklistip { 117.6.25.106 }
ufw deny from 117.6.25.106
(ip.src eq "117.6.25.106") then block