Dnsmasq (full) and firewall4 - using ipset or nftables together - no out-of-the-box solution in OpenWrt 22.03.03

[vgaetera]

@mopsza

Could you tell me which Link explains it right?

There are different implementations with their own pros and cons.
I've tested this one with both IPv4 and IPv6:
https://openwrt.org/docs/guide-user/firewall/fw3_configurations/dns_ipset

@mopsza

my problem starts that I thought I need to initalize ipset with the help of the firewall

fw4 is based on nftables providing own built-in IP set implementation which is incompatible with the old IP sets.
Although configs and some commands may keep the word "ipset" in their name, they no longer use the old IP set back-end.

@mopsza

dnsmasq will use the ipsets

The problem is that dnsmasq 2.86 does not support the new IP set implementation.

@mopsza

i fail to initalize ipset

Check the above link, it works for me.