Add ip to ipset in fw4 do not work

Installing and Using OpenWrt Network and Wireless Configuration
6

Does fw4 reload-sets work?

But, why don't you add them directly into your OpenWrt UCI configs for the rule - and simply let the system make the proper nft stanzas for you automatically?

(Also, perhaps this thread will help: [22.03] Translate extra/raw firewall rules - in this thread I successfully converted my ipsets to fw4)

Additionally, 2 Examples:

config ipset                                  
        option name 'bogons'                  
        option match 'src_net'                
        list entry '0.0.0.0/8'                
        list entry '10.0.0.0/8'               
        list entry '100.64.0.0/10'            
        list entry '127.0.0.0/8'              
        list entry '169.254.0.0/16'           
        list entry '172.16.0.0/12'            
        list entry '192.0.0.0/24'             
        list entry '192.0.2.0/24'             
        list entry '192.168.0.0/16'           
        list entry '198.18.0.0/15'            
        list entry '198.51.100.0/24'          
        list entry '203.0.113.0/24'           
        list entry '224.0.0.0/4'              
        list entry '240.0.0.0/4' 

config ipset                                  
        option name 'test'              
        option match 'src_net'                
        list entry 'xxx.xxx.xxx.xxx'            
        option loadfile '/tmp/test_ipset.txt'

(The second example shows how you can additionally use a file with a list of IP/ranges.)

1 Like