Yes, it's OpenWrt. I'm on master, recently compiled. In general nftset works fine, it just only seems to work for hostnames and not for IP addresses:

nftset=/cooper.logs.roku.com/4#inet#fw4#adb4
nftset=/99.83.154.118/4#inet#fw4#adb4

The former works.  The latter never appears in the ruleset.

It would be handy if IP addresses could work too. This would make it, for example, so that DoH blocklists (IP only) could work alongside adblock block lists (hostnames).

    Kurt

On 2023-03-26 17:33, Eric Fahlgren wrote:

Hi Kurt,

Could it be that your dnsmasq is too old? Can I assume OpenWrt? Dnsmasq is currently at 2.86 on the release branch 22.03, and is missing the nftset stuff, but SNAPSHOT is at 2.89, so it should work there...

Eric

On Sun, Mar 26, 2023 at 1:15 PM Kurt Fitzner via Dnsmasq-discuss <dnsmasq-discuss@lists.thekelleys.org.uk> wrote:

Is there a way to have dnsmasq support the use of IP addresses in nftset directives? I cannot get it to work, though I can't see any reason why
it shouldn't.

Thanks.

Kurt Fitzner

_______________________________________________
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss

_______________________________________________
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss

Reply via email to