[Dnsmasq-discuss] Allow IP address in nftset

[Kurt Fitzner]

Yes, it's OpenWrt.  I'm on master, recently compiled.  In general nftset 
works fine, it just only seems to work for hostnames and not for IP 
addresses:

nftset=/cooper.logs.roku.com/4#inet#fw4#adb4
nftset=/99.83.154.118/4#inet#fw4#adb4

The former works.  The latter never appears in the ruleset.

It would be handy if IP addresses could work too.  This would make it, 
for example, so that DoH blocklists (IP only) could work alongside 
adblock block lists (hostnames).

     Kurt

On 2023-03-26 17:33, Eric Fahlgren wrote:

> Hi Kurt,
> 
> Could it be that your dnsmasq is too old?   Can I assume OpenWrt?  
> Dnsmasq is currently at 2.86 on the release branch 22.03, and is 
> missing the nftset stuff, but SNAPSHOT is at 2.89, so it should work 
> there...
> 
> Eric
> 
> On Sun, Mar 26, 2023 at 1:15 PM Kurt Fitzner via Dnsmasq-discuss 
> <dnsmasq-discuss at lists.thekelleys.org.uk> wrote:
> 
>> Is there a way to have dnsmasq support the use of IP addresses in 
>> nftset
>> directives?  I cannot get it to work, though I can't see any reason 
>> why
>> it shouldn't.
>> 
>> Thanks.
>> 
>> Kurt Fitzner
>> 
>> _______________________________________________
>> Dnsmasq-discuss mailing list
>> Dnsmasq-discuss at lists.thekelleys.org.uk
>> https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss