<html><head></head><body><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div>Hi, </div><div><br></div><div>When running with the ipset configuration, e.g.</div><div><br></div><div><span><div>ipset=/example.com/whitelist</div><div><br></div><div><br></div></span></div><div>If the query result is a CNAME of differnet domain e.g.</div><div><br></div><div>example.com. <span class="ydp3e28597fApple-tab-span"> </span>300<span class="ydp3e28597fApple-tab-span"> </span>IN<span class="ydp3e28597fApple-tab-span"> </span>CNAME<span class="ydp3e28597fApple-tab-span"> </span>d123456789abcdefg.cloudfront.net.<br>d123456789abcdefg.cloudfront.net. 60 IN<span class="ydp3e28597fApple-tab-span"> </span>A<span class="ydp3e28597fApple-tab-span"> </span>123.123.123.123</div><div><br></div><div>The IP address 123.123.123.123 would not be added to the IPSET. May I ask if it is possible to have dnsmasq to add the final reolved ip into the ipset?</div><div><br></div><div>Thank you!</div></div></body></html>