# Applying firewall rules

**URL:** <https://forum.openwrt.org/t/applying-firewall-rules/45479>\
**Category:** Network and Wireless Configuration\
**Created:** [September 28, 2019, 11:57am UTC](https://forum.openwrt.org/t/applying-firewall-rules/45479 "2019-09-28T11:57:40Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![lleachii](https://forum.openwrt.org/letter_avatar/lleachii/32/5_5575768a8748004e209b776fc1b2916d.png) [@lleachii](https://forum.openwrt.org/u/lleachii)\
**Post date:** [September 28, 2019, 1:41pm UTC](https://forum.openwrt.org/t/applying-firewall-rules/45479/4 "2019-09-28T13:41:21Z")

</div>

> [@stynx](#):
>
> Is there any easier and straightforward way to block those IP's/domains, because that's all I really need.

- For the domains, yes. I'd personally just install [Adblock](https://forum.openwrt.org/t/adblock-support-thread/507) and place them in the blacklist. This would allow me to block other domains/tracking later without a large fuss.
- IPs...those `firewall.user` rules should have worked, if you tested from a client in LAN (FORWARD); and not the router itself (OUTPUT).

You didn't mention if the DNS lookups are blocked when querying the OpenWrt's dnsmasq instance. If not, I believe that's because the [dnsmasq.conf additions are incorrect syntax](http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html)...or incomplete, rather. It's also not advisable to add raw configs and rules; but use OpenWrt's UCI/LuCI web GUI interfaces instead. The UCI file to edit for dnsmasq settings you desire is [`/etc/config/dhcp`](https://openwrt.org/docs/guide-user/base-system/dhcp). The firewall - [`/etc/config/firewall`](https://openwrt.org/docs/guide-user/firewall/firewall_configuration).

BTW, snapshots update every ~24 hours, I'd also upgrade to the latest snapshot before installing more packages.

---

_[View the full topic](https://forum.openwrt.org/t/applying-firewall-rules/45479)._