How to specify multiple CIDRs for port forwarding rules

[marlon-tucker]

Hello,

I'm attempting to follow this guide:

https://support.aa.net.uk/VoIP_Firewall

The first thing I'm stuck on is not being able to specify multiple CIDRs in the Luci interface when defining the SIP port forwarding rules.

The SIP inbound rules need to be restricted to the following CIDRs

81.187.30.110/31
81.187.30.112/29
90.155.3.0/24 
90.155.103.0/24 

How would be the best way to implement this, ideally using the UI?

Can I specify multiple forwarding rules for the same port with different incoming IP restrictions if I can only specify one CIDR at a time?

[vgaetera]

IP set examples

[marlon-tucker]

Is configuring option ipset available for redirect rules? If they are, I assume they filter the source ips?

[marlon-tucker]

All sorted and seems to be working as intended.

I used a combination of the OpenWRT wiki and this post to connect stuff together.

Port forward using ipset

Of course not, sorry for not doing so in the first place I created txt file (using Notepad++) like this : ipset create NameOfTheIpset hash:net ipset add NameOfTheIpset x.x.x.x/29 ipset add NameOfTheIpset x.x.x.x/24 Every line represent one ip network in CIDR format. At the end of the file add this : sleep 1 /etc/init.d/firewall restart This will wait 1 second after creating ipset and then restart firewall to allow reference in iptables to this iptest. If you don't ad…

Everything is defined in the /etc/config/firewall as I didn't need anything else.