diff --git a/box/scripts/box.iptables b/box/scripts/box.iptables
index f0ff883..d3cceb0 100755
--- a/box/scripts/box.iptables
+++ b/box/scripts/box.iptables
@@ -415,8 +415,8 @@ stop_redirect() {
   fi
 
   if [ "${iptables}" = "$IPV" ]; then
-    ${iptables} -t nat -D BOX_EXTERNAL -d "${fake_ip_range}" -p icmp -j DNAT --to-destination 127.0.0.1
-    ${iptables} -t nat -D BOX_LOCAL -d "${fake_ip_range}" -p icmp -j DNAT --to-destination 127.0.0.1
+    # ${iptables} -t nat -D BOX_EXTERNAL -d "${fake_ip_range}" -p icmp -j DNAT --to-destination 127.0.0.1
+    # ${iptables} -t nat -D BOX_LOCAL -d "${fake_ip_range}" -p icmp -j DNAT --to-destination 127.0.0.1
     ${iptables} -t nat -F BOX_EXTERNAL
     ${iptables} -t nat -X BOX_EXTERNAL
     ${iptables} -t nat -F BOX_LOCAL
diff --git a/box/scripts/box.service b/box/scripts/box.service
index 5379aec..677590e 100755
--- a/box/scripts/box.service
+++ b/box/scripts/box.service
@@ -353,7 +353,7 @@ prepare_clash() {
 
     sed -i "/tun:/,/enable:/ { /enable: false/ s/enable: false/enable: true/ }" "${clash_config}"
   else
-    sed -i "/tun:/,/enable:/ { /enable: true/ s/enable: false/enable: false/ }" "${clash_config}"
+    sed -i "/tun:/,/enable:/ { /enable: true/ s/enable: true/enable: false/ }" "${clash_config}"
   fi
 
   # sync tproxy/redir port