It’s not very usable at the moment with fw4/nftables because dnsmasq is still waiting for the bump to v2.87 where nftables sets are supported. At the moment, those configs will ask dnsmasq to populate ipsets that won’t exist on 22.03 or master. It would work fine with 21.02.