> On 9 Dec 2017, at 01:15, Philip Prindeville > <philipp_s...@redfish-solutions.com> wrote: > > > config rule > option name kaspersky_servers > option proto tcp > option dest_port 25 > list src 81.176.69.118 > list src 81.176.230.4 > list src 91.103.66.246 > list src 91.103.66.248 > option target ACCEPT <snip>
As an aside/afterthought: Did you know dnsmasq can fill in addresses of ipsets for you --ipset=/<domain>[/<domain>...]/<ipset>[,<ipset>...] Places the resolved IP addresses of queries for one or more domains in the specified Netfilter IP set. If multiple setnames are given, then the addresses are placed in each of them, subject to the limitations of an IP set (IPv4 addresses cannot be stored in an IPv6 IP set and vice versa). Domains and subdomains are matched in the same way as --address. These IP sets must already exist. See ipset(8) for more details. Cheers, Kevin
signature.asc
Description: Message signed with OpenPGP
_______________________________________________ Lede-dev mailing list Lede-dev@lists.infradead.org http://lists.infradead.org/mailman/listinfo/lede-dev
