diff --git a/用-Supervisor-运行-Shadowsocks.md b/用-Supervisor-运行-Shadowsocks.md
index 9fe6b3c..6af0c9b 100644
--- a/用-Supervisor-运行-Shadowsocks.md
+++ b/用-Supervisor-运行-Shadowsocks.md
@@ -80,3 +80,7 @@ sudo chkconfig supervisord on
 service supervisor start
 supervisorctl reload
 ```
+
+编辑 `/etc/sysconfig/iptables`，添加
+
+    -A INPUT -m state --state NEW -m tcp -p tcp --dport your_server_port -j ACCEPT
\ No newline at end of file