[建议]减小HE的IPV6/48被延迟探测送回原地的可能性

sudo apt update
sudo apt install nftables -y

rm /etc/nftables.conf
nano /etc/nftables.conf

flush ruleset

table ip6 nat {
    chain postrouting {
        type nat hook postrouting priority srcnat; policy accept;
        oifname "he-ipv6" masquerade
    }
}

table ip6 filter {
    chain input {
        type filter hook input priority 0; policy drop;
        iif "lo" accept
        ct state established,related accept
    }

    chain forward {
        type filter hook forward priority 0; policy drop;
    }

    chain output {
        type filter hook output priority 0; policy accept;
    }
}

sudo nft -f /etc/nftables.conf
sudo nft list ruleset

如果能正常列出规则，没有报错，就说明配置正确加载了
再去itdog试试看能不能通 不通应该就行了