#!/bin/bash
set -e

IPSET_NAME="china"

echo "[*] Removing iptables rules..."
iptables -D INPUT -m set --match-set "$IPSET_NAME" src -j DROP 2>/dev/null || true
iptables -D OUTPUT -m set --match-set "$IPSET_NAME" dst -j DROP 2>/dev/null || true

echo "[*] Destroying ipset..."
ipset destroy "$IPSET_NAME" 2>/dev/null || true
rm -f /etc/ipset.conf /tmp/cn.cidr /etc/iptables/iptables.rules

echo "[+] Done! Chinese IPs are now unblocked."