Administering ipsets?

Installing and Using OpenWrt
1

Hi,

OpenWRT 24.10.1 comes out of the box with the ability to add, use, and automatically populate ipsets from DNS. ipsets can be created in the firewall tab of luci, and populated with DNS queries is possible in the DHCP+DNS setings (General and IPSets subtabs).

But I did not see any way to view and check the current contents of an ipset. Neither the configuration web page, nor the Firewall Status page do tell anything about the current status of ipset.

In a shell, there is no ipset or nftables tool without installing the ipset tool from a package.

Shouldn't the GUI be able to display contents of ipsets, if it offers to create and populate them?

regards

2

You can run nft list sets to see what's currently in the various sets.

In practice, it could be a very long list of entries that might overwhelm the GUI and cause bad performance.

1 Like
3

Oh, damned. I should have known (and actually had known) better. Too tired. I had erroneously looked for 'nftables' instead of 'nft'.

Thanks.

1 Like