IPsets not working for me

RSHARM · September 10, 2025, 10:49am

I tried using IP list but it doesn’t work.

anon63541380 · September 10, 2025, 10:50am

ipsets are thing of the past, fw4 transparently uses same input to generate nftables sets.

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:

Remember to redact passwords, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall

frollic · September 10, 2025, 11:02am

post your Netflix_IPv4.txt too.

RSHARM · September 10, 2025, 11:14am

/etc/config$ ubus call system board
{
"kernel": "6.6.93",
"hostname": "",
"system": "MediaTek MT7621 ver:1 eco:3",
"model": "D-Link DIR-2640 A1",
"board_name": "dlink,dir-2640-a1",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "24.10.2",
"revision": "r28739-d9340319c6",
"target": "ramips/mt7621",
"description": "OpenWrt 24.10.2 r28739-d9340319c6",
"builddate": "1750711236"
}
}

RSHARM · September 10, 2025, 11:15am

/etc/config$ cat /etc/config/network

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option packet_steering '1'
	option steering_flows '128'
	option ula_prefix 'fd00::/8'

config device
	option name 'boobs' 
	option type 'bridge'
	option macaddr '00:00:00:00:00:00'
	list ports 'lan1'
	list ports 'lan2'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.1.1'
	option netmask '255.255.255.240'
	list dns '127.0.0.1'
	list dns '0::1'
	option ip6ifaceid '::1'
	option delegate '0'

config interface 'wan'
	option device 'wan'
	option proto 'dhcp'
	option peerdns '0'
	list dns '127.0.0.1'

config interface 'wan6'
	option device 'wan'
	option proto 'dhcpv6'
	option reqaddress 'try'
	option reqprefix 'auto'
	option norelease '1'
	option peerdns '0'
	list dns '0::1'
	option delegate '0'
	option auto '0'

config interface 'Wireguard'
	option proto 'wireguard'
	list addresses '10.2.0.2/32'
	option name 'boobs' 
	list dns '127.0.0.1'
	list dns '0::1'

config interface 'guest'
	option proto 'static'
	option ipaddr '192.168.3.1'
	option netmask '255.255.255.240'
	option device 'br-guest'
	list dns '127.0.1.1'
	list dns '127.0.0.1'
	option auto '0'

config interface 'private'
	option proto 'static'
	option ipaddr '192.168.2.1'
	option device 'br-private'
	option netmask '255.255.255.240'
	list dns '127.0.0.1'
	list dns '0::1'
	option ip6ifaceid '::1'
	option delegate '0'

config device
	option type 'bridge'
	option name 'boobs' 
	option bridge_empty '1'
	list ports 'lan4'

config device
	option type 'bridge'
	option name 'boobs' 
	option bridge_empty '1'
	option macaddr '00:00:00:00:00:00'
	list ports 'lan3'

config device
	option type 'bridge'
	option name 'boobs' 
	option bridge_empty '1'
	option macaddr '00:00:00:00:00:00'

config interface 'server'
	option proto 'static'
	option ipaddr '192.168.4.1'
	option device 'br-server'
	option netmask '255.255.255.240'
	list dns '127.0.0.1'
	list dns '0::1'
	option ip6ifaceid '::1'
	option auto '0'

config device
	option name 'boobs' 
	option macaddr '00:00:00:00:00:00'

config device
	option name 'boobs' 

config interface 'wwan'
	option proto 'dhcp'
	option auto '0'
	option disabled '1'

config device

config wireguard_Wireguard
	option description '-#53'
	option public_key '='
	option name 'boobs' 
	list allowed_ips '0.0.0.0/0'
	option persistent_keepalive '25'
	option endpoint_host '16'

config interface 'serverlocal'
	option proto 'static'
	option ipaddr '192.168.5.1'
	option netmask '255.255.255.0'
	option device 'br-serverlocal'
	option auto '0'

config device
	option type 'bridge'
	option name 'boobs'

RSHARM · September 10, 2025, 11:15am

/etc/config$ cat /etc/config/wireless

config wifi-device 'radio0'
	option type 'mac80211'
	option path '1e140000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
	option band '2g'
	option cell_density '3'
	option country 'US'
	option htmode 'HT40'
	option channel 'auto'
	option txpower '21'
	option rxldpc '0'

config wifi-device 'radio1'
	option type 'mac80211'
	option path '1e140000.pcie/pci0000:00/0000:00:01.0/0000:02:00.0'
	option band '5g'
	option cell_density '3'
	option country 'XX'
	option channel 'auto'
	option txpower '18'
	option htmode 'VHT80'

config wifi-iface 'boobs' 
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option name 'boobs' 
	option ifname 'boobs' 
	option key 'nopep'
	option encryption 'sae-mixed'
	option wpa_disable_eapol_key_retries '1'
	option macaddr 'random'
	option ieee80211w '1'
	option ocv '0'
	option isolate '1'

config wifi-iface 'boobs' 
	option device 'radio1'
	option mode 'ap'
	option wpa_disable_eapol_key_retries '1'
	option network 'lan'
	option ifname 'boobs' 
	option name 'boobs' 
	option key 'nopep'
	option encryption 'sae-mixed'
	option macaddr 'random'
	option ieee80211w '1'
	option ocv '0'
	list maclist '00:00:00:00:00:00'
	list maclist '00:00:00:00:00:00'
	list maclist '00:00:00:00:00:00'
	option isolate '1'

config wifi-iface 'boobs' 
	option device 'radio0'
	option mode 'ap'
	option wpa_disable_eapol_key_retries '1'
	option ifname 'boobs' 
	option key 'nopep'\''/3Yv('
	option name 'boobs' 
	option encryption 'sae-mixed'
	option network 'private'
	option macaddr 'random'
	option ocv '0'
	list maclist '00:00:00:00:00:00'
	list maclist '00:00:00:00:00:00'
	list maclist '00:00:00:00:00:00'
	list maclist '00:00:00:00:00:00'
	option skip_inactivity_poll '1'

config wifi-iface 'boobs' 
	option device 'radio1'
	option mode 'ap'
	option encryption 'sae-mixed'
	option wpa_disable_eapol_key_retries '1'
	option ifname 'boobs' 
	option key 'nopep'
	option name 'boobs' 
	option network 'private'
	option macaddr 'random'
	option ieee80211w '1'
	option ocv '0'
	list maclist '00:00:00:00:00:00'

config wifi-iface 'boobs' 
	option device 'radio0'
	option mode 'ap'
	option name 'boobs' 
	option encryption 'sae-mixed'
	option isolate '1'
	option ifname 'boobs' 
	option macaddr 'random'
	option key 'nopep''
	option ieee80211w '1'
	option wpa_disable_eapol_key_retries '1'
	option network 'Guest guest'
	option ocv '0'
	option disabled '1'

config wifi-iface 'boobs' 
	option device 'radio0'
	option mode 'ap'
	option name 'boobs' 
	option encryption 'sae-mixed'
	option macaddr 'random'
	option key 'nopep'
	option network 'server'
	option isolate '1'
	option ifname 'boobs' 
	option ocv '0'
	option disabled '1'

config wifi-iface 'boobs' 
	option device 'radio0'
	option mode 'sta'
	option network 'wwan'
	option name 'boobs' 
	option encryption 'sae'
	option key 'nopep'
	option macaddr 'random'
	option ocv '0'
	option disabled '1'
	option ifname 'boobs' 

config wifi-iface 'boobs' 
	option device 'radio1'
	option mode 'monitor'
	option network 'lan'
	option ifname 'boobs' 
	option macaddr 'random'
	option name 'boobs' 
	option disabled '1'

config wifi-iface 'boobs' 
	option device 'radio0'
	option mode 'mesh'
	option mesh_fwding '1'
	option mesh_rssi_threshold '0'
	option key 'nopep'
	option encryption 'none'
	option mesh_id '80211s'
	option macaddr 'random'
	option disabled '1'

config wifi-iface 'boobs' 
	option device 'radio0'
	option mode 'adhoc'
	option name 'boobs' 
	option macaddr 'random'
	option ifname 'boobs' 
	option disabled '1'
	option network 'Guest'
	option encryption 'psk2'
	option key 'nopep'

config wifi-iface 'boobs' 
	option device 'radio0'
	option mode 'ap'
	option name 'boobs' 
	option encryption 'psk2'
	option macaddr 'random'
	option key 'nopep'
	option ifname 'boobs' 
	option ieee80211w '2'
	option ocv '1'
	option wpa_disable_eapol_key_retries '1'
	option disabled '1'

config wifi-iface 'boobs' 
	option device 'radio0'
	option mode 'ap'
	option name 'boobs' 
	option encryption 'psk2'
	option macaddr '00:00:00:00:00:00'
	option key 'nopep'
	option ifname 'boobs' 
	option hidden '1'
	option ieee80211w '2'
	option ocv '0'
	option wpa_disable_eapol_key_retries '1'
	option disabled '1'

RSHARM · September 10, 2025, 11:15am

/etc/config$ cat /etc/config/dhcp

config dnsmasq
	option domainneeded '1'
	option localise_queries '1'
	option rebind_protection '1'
	option rebind_localhost '1'
	option local '/lan/'
	option domain 'lan'
	option expandhosts '1'
	option cachesize '1000'
	option authoritative '1'
	option readethers '1'
	option leasefile '/tmp/dhcp.leases'
	option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
	option localservice '1'
	option ednspacket_max '1232'
	list server '127.0.0.1#5453'
	list server '0::1#5453'
	list rebind_domain 'time.android.com'
	option stripmac '1'

config dhcp 'lan'
	option interface 'lan'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option dhcpv4 'server'
	option dhcpv6 'server'
	option ra 'server'
	list ra_flags 'managed-config'
	list ra_flags 'other-config'
	option force '1'

config dhcp 'wan'
	option interface 'wan'
	option ignore '1'
	option start '100'
	option limit '150'
	option leasetime '12h'

config odhcpd 'odhcpd'
	option maindhcp '0'
	option leasefile '/tmp/hosts/odhcpd'
	option leasetrigger '/usr/sbin/odhcpd-update'
	option loglevel '4'

config dhcp 'guest'
	option interface 'guest'
	option start '100'
	option limit '150'
	option leasetime '12h'

config dhcp 'private'
	option interface 'private'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option force '1'

config dhcp 'server'
	option interface 'server'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option force '1'

config host
	option name 'boobs' 
	option ip '192.168.1.2'
	list mac '00:00:00:00:00:00'

config host
	option name 'boobs' 
	list mac '00:00:00:00:00:00'
	option ip '192.168.1.3'
	option leasetime 'infinite'
	option name 'boobs' 

config host
	option name 'boobs' 
	option ip '192.168.1.4'
	option leasetime 'infinite'
	list mac '00:00:00:00:00:00'
	option name 'boobs' 
	option name 'boobs' 

config host
	option name 'boobs' 
	option ip '192.168.1.5'

config host
	option name 'boobs' 
	list mac '00:00:00:00:00:00'
	option ip '192.168.4.6'

config host
	option name 'boobs' 
	option ip '192.168.1.6'
	option mac '00:00:00:00:00:00'
	option name 'boobs' 

config host
	option name 'boobs' 
	option ip '192.168.1.7'

config host
	option name 'boobs' 
	option ip '192.168.1.8'

config host
	option name 'boobs' 
	option ip '192.168.1.9'
	option mac '00:00:00:00:00:00'
	option leasetime '1m'
	option name 'boobs' 

config host
	option name 'boobs' 
	option ip '192.168.1.10'
	option leasetime 'infinite'
	list mac '00:00:00:00:00:00'
	option name 'boobs' 

config host
	option name 'boobs' 
	option ip '192.168.1.11'
	option leasetime 'infinite'

config host
	option name 'boobs' 
	option leasetime 'infinite'
	list mac '00:00:00:00:00:00'
	option ip '192.168.1.12'
	option name 'boobs' 

config host
	option name 'boobs' 
	option ip '192.168.1.13'
	option leasetime 'infinite'
	option mac '00:00:00:00:00:00'
	option name 'boobs' 

config host
	option name 'boobs' 
	option ip '192.168.1.14'
	list mac '00:00:00:00:00:00'
	option leasetime 'infinite'

config host
	option name 'boobs' 
	option ip '192.168.1.15'

config host
	option name 'boobs' 
	option mac '00:00:00:00:00:00'
	option ip '192.168.2.2'
	option leasetime 'infinite'
	option name 'boobs' 

config host
	option name 'boobs' 
	list mac '00:00:00:00:00:00'
	option ip '192.168.2.3'
	option leasetime 'infinite'
	option name 'boobs' 

config host
	option name 'boobs' 
	list mac '00:00:00:00:00:00'
	option ip '192.168.2.4'
	option leasetime 'infinite'

config host
	option name 'boobs' 
	list mac '00:00:00:00:00:00'
	option ip '192.168.2.5'
	option leasetime 'infinite'
	option name 'boobs' 

config host
	list mac '00:00:00:00:00:00'
	option ip '192.168.2.6'
	option name 'boobs' 
	option leasetime 'infinite'
	option name 'boobs' 

config ipset
	list name '192.168.1.9-192.168.1.12'
	list domain 'boobs' 
	option table_family 'inet'

config ipset
	list domain 'boobs' 
	list name '192.168.1.8-192.168.1.12'
	option table_family 'inet'

config ipset
	list name '192.168.1.8'
	list name '192.168.1.9'
	list name '192.168.1.12'
	list domain 'boobs' 
	option table_family 'inet'

config ipset
	list domain 'boobs' 
	list name 'facebook.com'
	option table_family 'inet'

config host
	option name 'boobs' 

config host
	option name 'boobs' 

config dhcp 'serverlocal'
	option interface 'serverlocal'
	option start '100'
	option limit '150'
	option leasetime '12h'

RSHARM · September 10, 2025, 11:17am

/etc/config$ cat /etc/config/firewall

config defaults
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option synflood_protect '1'
	option drop_invalid '1'
	option flow_offloading '1'
	option flow_offloading_hw '1'

config zone
	option name 'boobs' 
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'ACCEPT'
	list network 'lan'

config zone
	option name 'boobs' 
	option output 'ACCEPT'
	option forward 'ACCEPT'
	option mtu_fix '1'
	option input 'DROP'
	option masq '1'
	option masq6 '1'
	list network 'wan'
	list network 'wan6'
	list network 'wwan'

config zone
	option output 'ACCEPT'
	option forward 'REJECT'
	option masq '1'
	option name 'boobs' 
	option input 'DROP'
	list network 'Wireguard'

config zone
	option name 'boobs' 
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'private'

config zone
	option name 'boobs' 
	option output 'ACCEPT'
	option forward 'REJECT'
	option input 'REJECT'
	list network 'guest'

config zone
	option input 'DROP'
	option output 'ACCEPT'
	option forward 'DROP'
	option name 'boobs' 
	list network 'server'

config zone
	option name 'boobs' 
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'serverlocal'

config forwarding
	option src 'Guest'
	option dest 'Wireguard'

config forwarding
	option src 'lan'
	option dest 'Wireguard'

config forwarding
	option src 'lan'
	option dest 'wan'

config forwarding
	option src 'private'
	option dest 'wan'

config forwarding
	option src 'private'
	option dest 'Wireguard'

config forwarding
	option src 'lan'
	option dest 'private'

config redirect
	option dest 'server'
	option target 'DNAT'
	option name 'boobs' 
	option src 'wan'
	option dest_ip '192.168.4.6'
	option family 'ipv4'
	list proto 'all'
	option enabled '0'

config redirect
	option target 'DNAT'
	option name 'boobs' 
	option src 'wan'
	option src_dport '49156'
	option dest_ip '192.168.1.4'
	option dest_port '49156'
	option dest 'lan'
	list proto 'tcp'
	list proto 'udp'
	list proto 'icmp'
	option enabled '0'

config redirect
	option target 'DNAT'
	option src 'lan'
	option src_dport '53'
	option dest_ip '192.168.1.1'
	option dest_port '53'
	option name 'boobs' 
	list src_mac '!00:00:00:00:00:00'

config redirect
	option target 'DNAT'
	option src 'Guest'
	option src_dport '53'
	option dest_port '53'
	option dest_ip '192.168.3.1'
	option name 'boobs' 

config redirect
	option target 'DNAT'
	option name 'boobs' 
	option src 'private'
	option src_dport '53'
	option dest_ip '192.168.2.1'
	option dest_port '53'
	list src_mac '!00:00:00:00:00:00'

config redirect
	option target 'DNAT'
	option name 'boobs' 
	option src 'server'
	option src_dport '53'
	option dest_ip '192.168.4.1'
	option dest_port '53'

config redirect
	option target 'DNAT'
	option src 'lan'
	option dest_port '853'
	option src_dport '853'
	option dest_ip '139.84.177.196'
	option name 'boobs' 
	list src_mac '!00:00:00:00:00:00'
	option reflection_src 'external'

config redirect
	option target 'DNAT'
	option src_dport '853'
	option dest_ip '139.84.177.196'
	option dest_port '853'
	option src 'private'
	option dest 'wan'
	option name 'boobs' 

config redirect
	option dest 'wan'
	option target 'DNAT'
	option name 'boobs' 
	option src 'lan'
	option src_dport '123'
	option dest_port '123'
	option dest_ip '192.168.1.1'
	list proto 'udp'

config redirect
	option target 'DNAT'
	option name 'boobs' 
	option src 'private'
	option src_dport '123'
	option dest_ip '192.168.2.1'
	option dest_port '123'
	list proto 'udp'

config redirect
	option dest 'lan'
	option target 'DNAT'
	option src 'Guest'
	option src_dport '123'
	option dest_ip '192.168.3.1'
	option dest_port '123'
	option name 'boobs' 
	list proto 'udp'

config redirect
	option dest 'server'
	option target 'DNAT'
	option name 'boobs' 
	option src 'server'
	option src_dport '443-8080'
	option dest_port '8080'
	option dest_ip '10.10.11.2'

config ipset
	option name 'boobs' 
	option family 'ipv4'
	list match 'src_mac'
	list entry '00:00:00:00:00:00'
	list entry '00:00:00:00:00:00'
	list entry '00:00:00:00:00:00'

config ipset
	option name 'boobs' 
	option family 'ipv4'
	list match 'src_mac'
	list entry '00:00:00:00:00:00'
	list entry '00:00:00:00:00:00'
	list entry '00:00:00:00:00:00'
	list entry '00:00:00:00:00:00'

config ipset
	option name 'boobs' 
	option family 'ipv4'
	list match 'dest_ip'
	option loadfile '/etc/luci-uploads/doh-ipv4(dibdot).txt'
	option enabled '0'

config nat
	list proto 'tcp'
	list proto 'udp'
	option src 'lan'
	option dest_port '5353'
	option target 'SNAT'
	option snat_port '53'
	option name 'boobs' 
	option enabled '0'

config nat
	option name 'boobs' 
	option src 'PubServer'
	option target 'SNAT'
	option snat_ip '10.10.11.2'
	list proto 'tcp'
	list proto 'udp'
	option snat_port '8080'
	option dest_port '443'
	option enabled '0'

config nat
	option name 'boobs' 
	list proto 'all'
	option src 'wan'
	option target 'ACCEPT'
	option enabled '0'

config nat
	option name 'boobs' 
	list proto 'all'
	option src 'wan'
	option src_ip '192.168.1.4'
	option target 'SNAT'
	option snat_ip '0.0.0.0'
	option enabled '0'

config rule
	option name 'boobs' 
	option src 'wan'
	option proto 'udp'
	option dest_port '68'
	option target 'ACCEPT'
	option family 'ipv4'
	option limit '10/second'
	option log '1'
	list src_mac '00:00:00:00:00:00'

config rule
	option name 'boobs' 
	option src 'wan'
	option proto 'icmp'
	option family 'ipv4'
	option target 'ACCEPT'
	list icmp_type 'echo-request'
	list dest_ip '192.168.100.1'
	option limit '1000/second'

config rule
	option name 'boobs' 
	option src 'wan'
	option proto 'igmp'
	option family 'ipv4'
	option target 'ACCEPT'
	option log '0'
	option limit '10/second'

config rule
	option name 'boobs' 
	option src 'wan'
	option proto 'udp'
	option dest_port '546'
	option family 'ipv6'
	option target 'ACCEPT'
	option log '1'
	list src_mac '00:00:00:00:00:00'
	option limit '10/second'

config rule
	option name 'boobs' 
	option src 'wan'
	option proto 'icmp'
	option family 'ipv6'
	option target 'ACCEPT'
	list src_ip 'fe80::/10'

config rule
	option name 'boobs' \''s for pinging to/from router itself)'
	option src 'wan'
	option proto 'icmp'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'
	list icmp_type 'bad-header'
	list icmp_type 'destination-unreachable'
	list icmp_type 'echo-reply'
	list icmp_type 'echo-request'
	list icmp_type 'neighbour-advertisement'
	list icmp_type 'neighbour-solicitation'
	list icmp_type 'packet-too-big'
	list icmp_type 'router-advertisement'
	list icmp_type 'router-solicitation'
	list icmp_type 'time-exceeded'
	list icmp_type 'unknown-header-type'

config rule
	option name 'boobs' 
	option src 'wan'
	option dest '*'
	option proto 'icmp'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'
	list icmp_type 'bad-header'
	list icmp_type 'destination-unreachable'
	list icmp_type 'echo-reply'
	list icmp_type 'echo-request'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'unknown-header-type'

config rule
	option name 'boobs' 
	option src 'wan'
	option dest 'lan'
	option proto 'esp'
	option target 'ACCEPT'

config rule
	option name 'boobs' 
	option src 'wan'
	option dest 'lan'
	option dest_port '500'
	option proto 'udp'
	option target 'ACCEPT'

config rule
	option name 'boobs' 
	option src 'wan'
	option dest 'server'
	option target 'ACCEPT'
	list dest_ip '192.168.4.6'
	option family 'ipv4'
	list proto 'all'
	option enabled '0'

config rule
	option name 'boobs' 
	option src 'wan'
	option dest 'lan'
	option target 'ACCEPT'
	list dest_ip '192.168.1.4'
	option dest_port '49156'
	option enabled '0'

config rule
	option name 'boobs' 
	option src 'wan'
	option dest 'lan'
	option target 'ACCEPT'
	list dest_ip '192.168.1.4'
	option dest_port '37055'
	option enabled '0'

config rule
	option name 'boobs' 
	option src 'wan'
	option target 'DROP'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'wan'
	option target 'DROP'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'wan'
	option direction 'in'
	option device 'wan'
	option target 'DROP'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'wan'
	option dest '*'
	option target 'DROP'
	list proto 'all'
	option log '1'

config rule
	option name 'boobs' 
	option src 'Wireguard'
	option target 'DROP'
	option dest '*'
	list proto 'all'
	option log '1'

config rule
	option name 'boobs' 
	option target 'REJECT'
	option family 'ipv6'
	option dest '*'
	option src '*'
	list dest_ip '2000::/3'
	list proto 'all'

config rule
	option name 'boobs' 
	option src '*'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_ip '192.168.1.3'
	list src_ip '192.168.1.4'
	option dest '*'
	list dest_ip '192.168.1.3'
	list dest_ip '192.168.1.4'
	option target 'ACCEPT'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'Guest'
	option dest '*'
	option target 'DSCP'
	option set_dscp 'BE'
	list proto 'all'

config rule
	option name 'boobs' 
	option src '*'
	option dest_port '67 68'
	option target 'DSCP'
	option set_dscp 'EF'

config rule
	option name 'boobs' 
	option dest '*'
	option target 'DSCP'
	option set_dscp 'AF32'
	option enabled '0'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest_port '80 443 22'
	option target 'DSCP'
	option set_dscp 'EF'

config rule
	option name 'boobs' 
	option dest '*'
	option dest_port '53 853'
	option target 'DSCP'
	option set_dscp 'AF22'
	option src '*'

config rule
	option name 'boobs' 
	list proto 'icmp'
	option dest '*'
	option target 'DSCP'
	option set_dscp 'AF31'
	option src '*'

config rule
	option name 'boobs' 
	list proto 'udp'
	option dest '*'
	option dest_port '500 4500'
	option target 'DSCP'
	option set_dscp 'EF'
	option src '*'
	option ipset 'boobs' 

config rule
	option name 'boobs' 
	list proto 'tcp'
	option dest '*'
	option target 'DSCP'
	option set_dscp 'EF'
	option src '*'
	option dest_port '143'
	option ipset 'boobs' 

config rule
	option name 'boobs' 
	list src_mac '00:00:00:00:00:00'
	option target 'DSCP'
	option src 'private'
	option set_dscp 'AF32'
	option dest '*'

config rule
	option name 'boobs' 
	option target 'DSCP'
	option src '*'
	option set_dscp 'AF32'
	option dest '*'
	option ipset 'boobs' 
	option log '1'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	option enabled '0'

config rule
	option name 'boobs' 
	option target 'DSCP'
	option src '*'
	option set_dscp 'AF41'
	option dest '*'
	list dest_ip '4.78.139.0/24'
	list dest_ip '23.101.24.0/24'
	list dest_ip '23.202.231.0/24'
	list dest_ip '23.217.138.0/24'
	list dest_ip '23.225.141.0/24'
	list dest_ip '23.234.30.0/24'
	list dest_ip '31.13.64.0/24'
	list dest_ip '31.13.67.0/24'
	list dest_ip '31.13.68.0/22'
	list dest_ip '31.13.73.0/24'
	list dest_ip '31.13.75.0/24'
	list dest_ip '31.13.76.0/24'
	list dest_ip '31.13.80.0/21'
	list dest_ip '31.13.88.0/24'
	list dest_ip '31.13.90.0/23'
	list dest_ip '31.13.92.0/24'
	list dest_ip '31.13.94.0/23'
	list dest_ip '31.13.96.0/24'
	list dest_ip '31.13.106.0/24'
	list dest_ip '31.13.112.0/24'
	list dest_ip '37.152.2.0/24'
	list dest_ip '38.121.72.0/24'
	list dest_ip '39.109.122.0/24'
	list dest_ip '43.226.16.0/24'
	list dest_ip '43.245.104.0/24'
	list dest_ip '45.54.28.0/24'
	list dest_ip '45.77.186.0/24'
	list dest_ip '45.114.11.0/24'
	list dest_ip '45.253.131.0/24'
	list dest_ip '46.61.154.0/24'
	list dest_ip '46.134.216.0/24'
	list dest_ip '47.88.58.0/24'
	list dest_ip '49.231.55.0/24'
	list dest_ip '50.23.209.0/24'
	list dest_ip '50.87.93.0/24'
	list dest_ip '50.117.117.0/24'
	list dest_ip '52.58.1.0/24'
	list dest_ip '52.175.9.0/24'
	list dest_ip '54.89.135.0/24'
	list dest_ip '54.144.128.0/24'
	list dest_ip '54.234.18.0/24'
	list dest_ip '58.63.233.0/24'
	list dest_ip '59.18.44.0/24'
	list dest_ip '59.18.46.0/24'
	list dest_ip '59.24.3.0/24'
	list dest_ip '59.188.250.0/24'
	list dest_ip '61.91.8.0/24'
	list dest_ip '61.205.119.0/24'
	list dest_ip '62.0.80.0/24'
	list dest_ip '64.13.192.0/24'
	list dest_ip '64.53.242.0/24'
	list dest_ip '64.233.160.0/21'
	list dest_ip '64.233.168.0/22'
	list dest_ip '64.233.176.0/20'
	list dest_ip '65.49.26.0/24'
	list dest_ip '65.49.68.0/24'
	list dest_ip '66.102.1.0/24'
	list dest_ip '66.220.146.0/23'
	list dest_ip '66.220.148.0/23'
	list dest_ip '67.15.100.0/24'
	list dest_ip '67.15.129.0/24'
	list dest_ip '67.228.102.0/24'
	list dest_ip '67.228.235.0/24'
	list dest_ip '67.230.169.0/24'
	list dest_ip '69.30.25.0/24'
	list dest_ip '69.50.221.0/24'
	list dest_ip '69.63.176.0/24'
	list dest_ip '69.63.178.0/24'
	list dest_ip '69.63.180.0/23'
	list dest_ip '69.63.184.0/24'
	list dest_ip '69.63.186.0/23'
	list dest_ip '69.63.190.0/24'
	list dest_ip '69.162.134.0/24'
	list dest_ip '69.171.224.0/24'
	list dest_ip '69.171.227.0/24'
	list dest_ip '69.171.228.0/23'
	list dest_ip '69.171.234.0/24'
	list dest_ip '69.171.242.0/24'
	list dest_ip '69.171.247.0/24'
	list dest_ip '69.197.153.0/24'
	list dest_ip '74.86.3.0/24'
	list dest_ip '74.86.12.0/24'
	list dest_ip '74.86.17.0/24'
	list dest_ip '74.86.118.0/24'
	list dest_ip '74.86.142.0/24'
	list dest_ip '74.86.151.0/24'
	list dest_ip '74.86.226.0/24'
	list dest_ip '74.86.228.0/24'
	list dest_ip '74.125.1.0/24'
	list dest_ip '74.125.2.0/24'
	list dest_ip '74.125.8.0/24'
	list dest_ip '74.125.10.0/23'
	list dest_ip '74.125.13.0/24'
	list dest_ip '74.125.20.0/23'
	list dest_ip '74.125.23.0/24'
	list dest_ip '74.125.24.0/24'
	list dest_ip '74.125.26.0/24'
	list dest_ip '74.125.28.0/24'
	list dest_ip '74.125.31.0/24'
	list dest_ip '74.125.68.0/22'
	list dest_ip '74.125.90.0/24'
	list dest_ip '74.125.96.0/24'
	list dest_ip '74.125.100.0/24'
	list dest_ip '74.125.102.0/23'
	list dest_ip '74.125.104.0/24'
	list dest_ip '74.125.106.0/24'
	list dest_ip '74.125.110.0/23'
	list dest_ip '74.125.124.0/24'
	list dest_ip '74.125.126.0/23'
	list dest_ip '74.125.128.0/20'
	list dest_ip '74.125.153.0/24'
	list dest_ip '74.125.154.0/23'
	list dest_ip '74.125.159.0/24'
	list dest_ip '74.125.164.0/24'
	list dest_ip '74.125.170.0/24'
	list dest_ip '74.125.172.0/23'
	list dest_ip '74.125.192.0/23'
	list dest_ip '74.125.195.0/24'
	list dest_ip '74.125.196.0/22'
	list dest_ip '74.125.200.0/22'
	list dest_ip '74.125.204.0/23'
	list dest_ip '74.125.206.0/24'
	list dest_ip '75.126.33.0/24'
	list dest_ip '75.126.115.0/24'
	list dest_ip '75.126.124.0/24'
	list dest_ip '75.126.135.0/24'
	list dest_ip '75.126.150.0/24'
	list dest_ip '75.126.164.0/24'
	list dest_ip '77.37.252.0/24'
	list dest_ip '77.120.15.0/24'
	list dest_ip '80.87.199.0/24'
	list dest_ip '81.23.20.0/24'
	list dest_ip '81.23.23.0/24'
	list dest_ip '81.192.13.0/24'
	list dest_ip '81.192.191.0/24'
	list dest_ip '88.191.249.0/24'
	list dest_ip '90.201.124.0/24'
	list dest_ip '92.87.232.0/24'
	list dest_ip '93.179.102.0/24'
	list dest_ip '94.24.232.0/24'
	list dest_ip '94.31.189.0/24'
	list dest_ip '95.59.170.0/24'
	list dest_ip '96.44.137.0/24'
	list dest_ip '98.159.108.0/24'
	list dest_ip '103.39.76.0/24'
	list dest_ip '103.42.176.0/24'
	list dest_ip '103.56.16.0/24'
	list dest_ip '103.73.161.0/24'
	list dest_ip '103.97.3.0/24'
	list dest_ip '103.97.176.0/24'
	list dest_ip '103.200.30.0/23'
	list dest_ip '103.214.168.0/24'
	list dest_ip '103.226.246.0/24'
	list dest_ip '103.228.130.0/24'
	list dest_ip '103.230.123.0/24'
	list dest_ip '103.240.180.0/24'
	list dest_ip '103.240.182.0/24'
	list dest_ip '103.246.246.0/24'
	list dest_ip '103.252.114.0/23'
	list dest_ip '104.16.251.0/24'
	list dest_ip '104.16.252.0/24'
	list dest_ip '104.23.124.0/23'
	list dest_ip '104.31.142.0/24'
	list dest_ip '104.244.43.0/24'
	list dest_ip '104.244.45.0/24'
	list dest_ip '104.244.46.0/24'
	list dest_ip '107.181.166.0/24'
	list dest_ip '108.160.161.0/24'
	list dest_ip '108.160.162.0/23'
	list dest_ip '108.160.165.0/24'
	list dest_ip '108.160.166.0/23'
	list dest_ip '108.160.169.0/24'
	list dest_ip '108.160.170.0/24'
	list dest_ip '108.160.172.0/23'
	list dest_ip '108.177.8.0/21'
	list dest_ip '108.177.96.0/23'
	list dest_ip '108.177.98.0/24'
	list dest_ip '108.177.103.0/24'
	list dest_ip '108.177.104.0/24'
	list dest_ip '108.177.111.0/24'
	list dest_ip '108.177.112.0/24'
	list dest_ip '108.177.119.0/24'
	list dest_ip '108.177.120.0/22'
	list dest_ip '108.177.125.0/24'
	list dest_ip '108.177.126.0/23'
	list dest_ip '109.224.41.0/24'
	list dest_ip '110.164.8.0/24'
	list dest_ip '111.243.214.0/24'
	list dest_ip '113.108.239.0/24'
	list dest_ip '113.171.242.0/24'
	list dest_ip '114.4.7.0/24'
	list dest_ip '114.43.24.0/24'
	list dest_ip '114.250.63.0/24'
	list dest_ip '114.250.64.0/23'
	list dest_ip '114.250.67.0/24'
	list dest_ip '114.250.69.0/24'
	list dest_ip '114.250.70.0/24'
	list dest_ip '115.126.100.0/24'
	list dest_ip '116.89.243.0/24'
	list dest_ip '118.98.30.0/24'
	list dest_ip '118.98.36.0/24'
	list dest_ip '118.98.106.0/24'
	list dest_ip '118.107.180.0/24'
	list dest_ip '118.184.26.0/24'
	list dest_ip '118.184.78.0/24'
	list dest_ip '118.193.202.0/24'
	list dest_ip '118.193.240.0/24'
	list dest_ip '119.28.87.0/24'
	list dest_ip '120.232.233.0/24'
	list dest_ip '120.232.234.0/24'
	list dest_ip '120.233.71.0/24'
	list dest_ip '120.253.250.0/24'
	list dest_ip '120.253.253.0/24'
	list dest_ip '120.253.255.0/24'
	list dest_ip '121.78.42.0/24'
	list dest_ip '122.10.85.0/24'
	list dest_ip '122.154.76.0/24'
	list dest_ip '122.248.226.0/24'
	list dest_ip '122.252.245.0/24'
	list dest_ip '124.11.210.0/24'
	list dest_ip '128.121.146.0/24'
	list dest_ip '128.121.243.0/24'
	list dest_ip '128.242.240.0/24'
	list dest_ip '128.242.245.0/24'
	list dest_ip '128.242.250.0/24'
	list dest_ip '130.211.15.0/24'
	list dest_ip '142.250.0.0/23'
	list dest_ip '142.250.4.0/24'
	list dest_ip '142.250.8.0/22'
	list dest_ip '142.250.12.0/23'
	list dest_ip '142.250.27.0/24'
	list dest_ip '142.250.28.0/24'
	list dest_ip '142.250.30.0/23'
	list dest_ip '142.250.64.0/20'
	list dest_ip '142.250.80.0/23'
	list dest_ip '142.250.96.0/21'
	list dest_ip '142.250.105.0/24'
	list dest_ip '142.250.107.0/24'
	list dest_ip '142.250.110.0/23'
	list dest_ip '142.250.112.0/22'
	list dest_ip '142.250.117.0/24'
	list dest_ip '142.250.123.0/24'
	list dest_ip '142.250.125.0/24'
	list dest_ip '142.250.126.0/24'
	list dest_ip '142.250.128.0/23'
	list dest_ip '142.250.136.0/24'
	list dest_ip '142.250.138.0/24'
	list dest_ip '142.250.140.0/23'
	list dest_ip '142.250.142.0/24'
	list dest_ip '142.250.145.0/24'
	list dest_ip '142.250.147.0/24'
	list dest_ip '142.250.148.0/22'
	list dest_ip '142.250.152.0/23'
	list dest_ip '142.250.157.0/24'
	list dest_ip '142.250.158.0/23'
	list dest_ip '142.250.176.0/20'
	list dest_ip '142.250.192.0/20'
	list dest_ip '142.250.217.0/24'
	list dest_ip '142.250.218.0/23'
	list dest_ip '142.251.0.0/23'
	list dest_ip '142.251.2.0/24'
	list dest_ip '142.251.4.0/23'
	list dest_ip '142.251.6.0/24'
	list dest_ip '142.251.8.0/23'
	list dest_ip '142.251.10.0/24'
	list dest_ip '142.251.12.0/23'
	list dest_ip '142.251.15.0/24'
	list dest_ip '142.251.16.0/24'
	list dest_ip '142.251.18.0/24'
	list dest_ip '142.251.29.0/24'
	list dest_ip '142.251.30.0/23'
	list dest_ip '142.251.32.0/22'
	list dest_ip '142.251.36.0/23'
	list dest_ip '142.251.39.0/24'
	list dest_ip '142.251.40.0/22'
	list dest_ip '142.251.45.0/24'
	list dest_ip '142.251.46.0/23'
	list dest_ip '142.251.107.0/24'
	list dest_ip '142.251.111.0/24'
	list dest_ip '142.251.112.0/24'
	list dest_ip '142.251.116.0/23'
	list dest_ip '142.251.120.0/24'
	list dest_ip '142.251.128.0/23'
	list dest_ip '142.251.130.0/24'
	list dest_ip '142.251.132.0/22'
	list dest_ip '142.251.140.0/22'
	list dest_ip '142.251.161.0/24'
	list dest_ip '142.251.162.0/23'
	list dest_ip '142.251.164.0/22'
	list dest_ip '142.251.168.0/24'
	list dest_ip '142.251.170.0/23'
	list dest_ip '142.251.172.0/22'
	list dest_ip '142.251.176.0/22'
	list dest_ip '142.251.180.0/24'
	list dest_ip '142.251.182.0/23'
	list dest_ip '142.251.184.0/22'
	list dest_ip '142.251.188.0/23'
	list dest_ip '142.251.190.0/24'
	list dest_ip '142.251.208.0/23'
	list dest_ip '142.251.211.0/24'
	list dest_ip '142.251.214.0/23'
	list dest_ip '142.251.216.0/24'
	list dest_ip '142.251.218.0/24'
	list dest_ip '142.251.220.0/22'
	list dest_ip '145.255.14.0/24'
	list dest_ip '148.163.48.0/24'
	list dest_ip '150.107.3.0/24'
	list dest_ip '154.0.29.0/24'
	list dest_ip '154.83.14.0/23'
	list dest_ip '154.85.102.0/24'
	list dest_ip '154.92.16.0/24'
	list dest_ip '156.233.67.0/24'
	list dest_ip '157.240.0.0/22'
	list dest_ip '157.240.6.0/23'
	list dest_ip '157.240.8.0/22'
	list dest_ip '157.240.12.0/23'
	list dest_ip '157.240.15.0/24'
	list dest_ip '157.240.16.0/23'
	list dest_ip '157.240.18.0/24'
	list dest_ip '157.240.20.0/23'
	list dest_ip '159.65.107.0/24'
	list dest_ip '159.106.121.0/24'
	list dest_ip '159.138.20.0/24'
	list dest_ip '162.125.1.0/24'
	list dest_ip '162.125.2.0/24'
	list dest_ip '162.125.6.0/23'
	list dest_ip '162.125.8.0/24'
	list dest_ip '162.125.17.0/24'
	list dest_ip '162.125.18.0/24'
	list dest_ip '162.125.32.0/24'
	list dest_ip '162.125.34.0/24'
	list dest_ip '162.125.80.0/24'
	list dest_ip '162.125.82.0/23'
	list dest_ip '162.220.12.0/24'
	list dest_ip '168.143.162.0/24'
	list dest_ip '168.143.171.0/24'
	list dest_ip '172.217.0.0/19'
	list dest_ip '172.217.70.0/24'
	list dest_ip '172.217.78.0/24'
	list dest_ip '172.217.129.0/24'
	list dest_ip '172.217.130.0/24'
	list dest_ip '172.217.133.0/24'
	list dest_ip '172.217.135.0/24'
	list dest_ip '172.217.160.0/20'
	list dest_ip '172.217.192.0/22'
	list dest_ip '172.217.197.0/24'
	list dest_ip '172.217.203.0/24'
	list dest_ip '172.217.204.0/24'
	list dest_ip '172.217.212.0/24'
	list dest_ip '172.217.214.0/23'
	list dest_ip '172.217.218.0/23'
	list dest_ip '172.217.221.0/24'
	list dest_ip '172.217.222.0/24'
	list dest_ip '172.253.58.0/24'
	list dest_ip '172.253.62.0/23'
	list dest_ip '172.253.112.0/21'
	list dest_ip '172.253.120.0/24'
	list dest_ip '172.253.122.0/23'
	list dest_ip '172.253.124.0/22'
	list dest_ip '172.253.132.0/24'
	list dest_ip '173.194.4.0/23'
	list dest_ip '173.194.12.0/24'
	list dest_ip '173.194.22.0/24'
	list dest_ip '173.194.28.0/23'
	list dest_ip '173.194.31.0/24'
	list dest_ip '173.194.49.0/24'
	list dest_ip '173.194.51.0/24'
	list dest_ip '173.194.54.0/23'
	list dest_ip '173.194.59.0/24'
	list dest_ip '173.194.64.0/22'
	list dest_ip '173.194.68.0/23'
	list dest_ip '173.194.70.0/24'
	list dest_ip '173.194.73.0/24'
	list dest_ip '173.194.74.0/24'
	list dest_ip '173.194.76.0/22'
	list dest_ip '173.194.135.0/24'
	list dest_ip '173.194.150.0/24'
	list dest_ip '173.194.154.0/24'
	list dest_ip '173.194.161.0/24'
	list dest_ip '173.194.162.0/23'
	list dest_ip '173.194.164.0/24'
	list dest_ip '173.194.166.0/23'
	list dest_ip '173.194.174.0/23'
	list dest_ip '173.194.178.0/24'
	list dest_ip '173.194.182.0/23'
	list dest_ip '173.194.184.0/23'
	list dest_ip '173.194.187.0/24'
	list dest_ip '173.194.188.0/24'
	list dest_ip '173.194.190.0/23'
	list dest_ip '173.194.192.0/19'
	list dest_ip '173.208.182.0/24'
	list dest_ip '173.231.12.0/24'
	list dest_ip '173.234.53.0/24'
	list dest_ip '173.236.182.0/24'
	list dest_ip '173.236.212.0/24'
	list dest_ip '173.244.209.0/24'
	list dest_ip '173.244.217.0/24'
	list dest_ip '173.252.88.0/24'
	list dest_ip '173.252.105.0/24'
	list dest_ip '173.252.108.0/24'
	list dest_ip '173.252.248.0/24'
	list dest_ip '173.255.209.0/24'
	list dest_ip '173.255.213.0/24'
	list dest_ip '174.36.196.0/24'
	list dest_ip '174.36.228.0/24'
	list dest_ip '174.37.54.0/24'
	list dest_ip '174.37.154.0/24'
	list dest_ip '174.37.175.0/24'
	list dest_ip '174.37.243.0/24'
	list dest_ip '178.151.230.0/24'
	list dest_ip '178.176.156.0/24'
	list dest_ip '179.60.193.0/24'
	list dest_ip '180.163.150.0/23'
	list dest_ip '182.50.139.0/24'
	list dest_ip '182.79.251.0/24'
	list dest_ip '184.72.1.0/24'
	list dest_ip '184.173.136.0/24'
	list dest_ip '185.45.6.0/23'
	list dest_ip '185.60.216.0/24'
	list dest_ip '185.60.218.0/23'
	list dest_ip '185.158.208.0/24'
	list dest_ip '186.208.210.0/24'
	list dest_ip '187.7.116.0/24'
	list dest_ip '190.5.235.0/24'
	list dest_ip '192.133.77.0/24'
	list dest_ip '192.178.24.0/23'
	list dest_ip '192.178.27.0/24'
	list dest_ip '192.178.48.0/23'
	list dest_ip '192.178.50.0/24'
	list dest_ip '192.178.52.0/24'
	list dest_ip '192.178.54.0/24'
	list dest_ip '192.178.56.0/23'
	list dest_ip '192.178.128.0/22'
	list dest_ip '192.178.152.0/22'
	list dest_ip '192.178.156.0/23'
	list dest_ip '192.178.162.0/23'
	list dest_ip '192.178.164.0/24'
	list dest_ip '192.178.210.0/24'
	list dest_ip '192.178.212.0/24'
	list dest_ip '192.178.214.0/24'
	list dest_ip '192.178.218.0/23'
	list dest_ip '192.178.220.0/24'
	list dest_ip '193.109.164.0/24'
	list dest_ip '194.78.0.0/24'
	list dest_ip '196.49.8.0/24'
	list dest_ip '198.27.124.0/24'
	list dest_ip '198.44.185.0/24'
	list dest_ip '199.16.156.0/24'
	list dest_ip '199.16.158.0/24'
	list dest_ip '199.59.148.0/23'
	list dest_ip '199.59.150.0/24'
	list dest_ip '199.96.58.0/23'
	list dest_ip '199.96.61.0/24'
	list dest_ip '199.96.62.0/23'
	list dest_ip '199.193.116.0/24'
	list dest_ip '201.0.223.0/24'
	list dest_ip '202.53.137.0/24'
	list dest_ip '202.160.128.0/23'
	list dest_ip '202.160.130.0/24'
	list dest_ip '202.169.173.0/24'
	list dest_ip '202.182.98.0/24'
	list dest_ip '203.66.182.0/24'
	list dest_ip '203.111.254.0/24'
	list dest_ip '203.113.51.0/24'
	list dest_ip '203.113.189.0/24'
	list dest_ip '203.208.39.0/24'
	list dest_ip '203.208.40.0/23'
	list dest_ip '203.208.43.0/24'
	list dest_ip '203.208.49.0/24'
	list dest_ip '203.208.50.0/24'
	list dest_ip '203.233.96.0/24'
	list dest_ip '204.79.197.0/24'
	list dest_ip '205.186.152.0/24'
	list dest_ip '208.31.254.0/24'
	list dest_ip '208.43.170.0/24'
	list dest_ip '208.43.237.0/24'
	list dest_ip '208.77.47.0/24'
	list dest_ip '208.101.21.0/24'
	list dest_ip '208.101.60.0/24'
	list dest_ip '209.85.144.0/22'
	list dest_ip '209.85.165.0/24'
	list dest_ip '209.85.200.0/22'
	list dest_ip '209.85.224.0/24'
	list dest_ip '209.85.226.0/24'
	list dest_ip '209.85.232.0/22'
	list dest_ip '209.95.56.0/24'
	list dest_ip '210.56.51.0/24'
	list dest_ip '210.139.253.0/24'
	list dest_ip '210.209.84.0/24'
	list dest_ip '211.104.160.0/24'
	list dest_ip '212.113.52.0/24'
	list dest_ip '213.59.210.0/24'
	list dest_ip '216.58.192.0/20'
	list dest_ip '216.58.208.0/21'
	list dest_ip '216.58.217.0/24'
	list dest_ip '216.58.220.0/22'
	list dest_ip '216.239.32.0/24'
	list dest_ip '216.239.34.0/24'
	list dest_ip '216.239.36.0/24'
	list dest_ip '216.239.38.0/24'
	list dest_ip '220.181.174.0/24'

config rule
	option name 'boobs' 
	option target 'DSCP'
	option src '*'
	option set_dscp 'AF41'
	option dest '*'
	list dest_ip '108.175.32.0/20'
	list dest_ip '108.175.34.0/24'
	list dest_ip '108.175.35.0/24'
	list dest_ip '192.173.64.0/18'
	list dest_ip '198.38.100.0/24'
	list dest_ip '198.38.101.0/24'
	list dest_ip '198.38.108.0/24'
	list dest_ip '198.38.109.0/24'
	list dest_ip '198.38.110.0/24'
	list dest_ip '198.38.111.0/24'
	list dest_ip '198.38.112.0/24'
	list dest_ip '198.38.113.0/24'
	list dest_ip '198.38.114.0/24'
	list dest_ip '198.38.115.0/24'
	list dest_ip '198.38.116.0/24'
	list dest_ip '198.38.117.0/24'
	list dest_ip '198.38.118.0/24'
	list dest_ip '198.38.119.0/24'
	list dest_ip '198.38.120.0/24'
	list dest_ip '198.38.121.0/24'
	list dest_ip '198.38.124.0/24'
	list dest_ip '198.38.125.0/24'
	list dest_ip '198.38.96.0/19'
	list dest_ip '198.38.96.0/24'
	list dest_ip '198.38.97.0/24'
	list dest_ip '198.38.98.0/24'
	list dest_ip '198.38.99.0/24'
	list dest_ip '198.45.48.0/20'
	list dest_ip '198.45.48.0/24'
	list dest_ip '198.45.49.0/24'
	list dest_ip '198.45.56.0/24'
	list dest_ip '198.45.57.0/24'
	list dest_ip '23.246.0.0/18'
	list dest_ip '23.246.14.0/24'
	list dest_ip '23.246.15.0/24'
	list dest_ip '23.246.16.0/24'
	list dest_ip '23.246.17.0/24'
	list dest_ip '23.246.20.0/24'
	list dest_ip '23.246.2.0/24'
	list dest_ip '23.246.22.0/24'
	list dest_ip '23.246.23.0/24'
	list dest_ip '23.246.24.0/24'
	list dest_ip '23.246.25.0/24'
	list dest_ip '23.246.26.0/24'
	list dest_ip '23.246.27.0/24'
	list dest_ip '23.246.28.0/24'
	list dest_ip '23.246.29.0/24'
	list dest_ip '23.246.30.0/24'
	list dest_ip '23.246.3.0/24'
	list dest_ip '23.246.31.0/24'
	list dest_ip '23.246.36.0/24'
	list dest_ip '23.246.4.0/24'
	list dest_ip '23.246.42.0/24'
	list dest_ip '23.246.46.0/24'
	list dest_ip '23.246.47.0/24'
	list dest_ip '23.246.48.0/24'
	list dest_ip '23.246.49.0/24'
	list dest_ip '23.246.50.0/24'
	list dest_ip '23.246.5.0/24'
	list dest_ip '23.246.51.0/24'
	list dest_ip '23.246.52.0/24'
	list dest_ip '23.246.54.0/24'
	list dest_ip '23.246.55.0/24'
	list dest_ip '23.246.56.0/24'
	list dest_ip '23.246.57.0/24'
	list dest_ip '23.246.58.0/24'
	list dest_ip '23.246.6.0/24'
	list dest_ip '23.246.7.0/24'
	list dest_ip '37.77.184.0/21'
	list dest_ip '37.77.186.0/24'
	list dest_ip '37.77.187.0/24'
	list dest_ip '37.77.188.0/24'
	list dest_ip '37.77.189.0/24'
	list dest_ip '37.77.190.0/24'
	list dest_ip '37.77.191.0/24'
	list dest_ip '45.57.0.0/17'
	list dest_ip '45.57.1.0/24'
	list dest_ip '45.57.11.0/24'
	list dest_ip '45.57.14.0/24'
	list dest_ip '45.57.15.0/24'
	list dest_ip '45.57.16.0/24'
	list dest_ip '45.57.17.0/24'
	list dest_ip '45.57.18.0/24'
	list dest_ip '45.57.19.0/24'
	list dest_ip '45.57.20.0/24'
	list dest_ip '45.57.2.0/24'
	list dest_ip '45.57.21.0/24'
	list dest_ip '45.57.22.0/24'
	list dest_ip '45.57.23.0/24'
	list dest_ip '45.57.3.0/24'
	list dest_ip '45.57.36.0/24'
	list dest_ip '45.57.37.0/24'
	list dest_ip '45.57.4.0/24'
	list dest_ip '45.57.42.0/24'
	list dest_ip '45.57.44.0/24'
	list dest_ip '45.57.45.0/24'
	list dest_ip '45.57.48.0/24'
	list dest_ip '45.57.49.0/24'
	list dest_ip '45.57.5.0/24'
	list dest_ip '45.57.54.0/24'
	list dest_ip '45.57.55.0/24'
	list dest_ip '45.57.58.0/24'
	list dest_ip '45.57.59.0/24'
	list dest_ip '45.57.60.0/24'
	list dest_ip '69.53.225.0/24'
	list dest_ip '207.45.72.0/22'
	list dest_ip '207.45.73.0/24'
	list dest_ip '45.57.40.0/24'
	list dest_ip '45.57.8.0/23'
	list dest_ip '45.57.8.0/24'
	list dest_ip '45.57.9.0/24'
	list dest_ip '192.173.64.0/24'
	list dest_ip '192.173.65.0/24'
	list dest_ip '192.173.66.0/24'
	list dest_ip '192.173.67.0/24'
	list dest_ip '192.173.68.0/24'
	list dest_ip '208.75.76.0/24'
	list dest_ip '69.53.230.0/24'
	list dest_ip '69.53.231.0/24'
	list dest_ip '69.53.233.0/24'
	list dest_ip '69.53.235.0/24'
	list dest_ip '69.53.240.0/24'
	list dest_ip '69.53.241.0/24'
	list dest_ip '69.53.242.0/24'
	list dest_ip '69.53.245.0/24'
	list dest_ip '69.53.246.0/24'
	list dest_ip '69.53.254.0/24'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'

RSHARM · September 10, 2025, 11:17am

config rule
	option dest_port '4244 5222 5223 5228 5242 50318 59234 3478 45395'
	option target 'DSCP'
	option dest '*'
	option set_dscp 'BE'
	option name 'boobs' 
	option src '*'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	option limit '10/second'
	list dest_ip '31.13.24.0/21'
	list dest_ip '31.13.64.0/18'
	list dest_ip '45.64.40.0/22'
	list dest_ip '57.141.0.0/21'
	list dest_ip '57.141.8.0/22'
	list dest_ip '57.141.12.0/23'
	list dest_ip '57.144.0.0/14'
	list dest_ip '66.220.144.0/20'
	list dest_ip '69.63.176.0/20'
	list dest_ip '69.171.224.0/19'
	list dest_ip '74.119.76.0/22'
	list dest_ip '102.132.96.0/19'
	list dest_ip '102.221.188.0/22'
	list dest_ip '103.4.96.0/22'
	list dest_ip '129.134.0.0/16'
	list dest_ip '147.75.208.0/20'
	list dest_ip '157.240.0.0/16'
	list dest_ip '163.70.128.0/17'
	list dest_ip '163.77.128.0/17'
	list dest_ip '163.114.128.0/20'
	list dest_ip '173.252.64.0/18'
	list dest_ip '179.60.192.0/22'
	list dest_ip '185.60.216.0/22'
	list dest_ip '185.89.216.0/22'
	list dest_ip '189.233.203.0/24'
	list dest_ip '189.247.71.0/24'
	list dest_ip '196.49.68.0/23'
	list dest_ip '199.201.64.0/22'
	list dest_ip '204.15.20.0/22'

config rule
	option dest_port '4244 5222 5223 5228 5242 50318 59234 3478 45395'
	option target 'DSCP'
	option dest 'wan'
	option set_dscp 'AF42'
	option name 'boobs' 
	option src 'lan'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	option limit '10/second'


config rule
	option name 'boobs' 
	list proto 'udp'
	option src 'lan'
	list src_mac '00:00:00:00:00:00'
	option dest 'wan'
	option dest_port '5004 9000'
	option target 'DSCP'
	option set_dscp 'AF42'
	option enabled '0'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest 'wan'
	option target 'DSCP'
	option set_dscp 'BE'
	list src_mac '00:00:00:00:00:00'
	option enabled '0'

config rule
	option target 'ACCEPT'
	list src_ip '192.168.1.2'
	option name 'boobs' 
	option src 'lan'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'lan'
	option target 'ACCEPT'
	list src_mac '00:00:00:00:00:00'
	option dest_port '3128'
	option enabled '0'

config rule
	option dest '*'
	option target 'REJECT'
	option name 'boobs' 
	option src '*'
	list dest_ip '6.0.0.0/8'
	list dest_ip '21.0.0.0/8'
	list dest_ip '22.0.0.0/8'
	list dest_ip '26.0.0.0/8'
	list dest_ip '29.0.0.0/8'
	list dest_ip '30.0.0.0/8'
	list dest_ip '33.0.0.0/8'
	list dest_ip '11.0.0.0/8'
	list dest_ip '7.0.0.0/8'
	list dest_ip '55.0.0.0/8'
	list dest_ip '28.0.0.0/8'
	list dest_ip '214.0.0.0/8'
	list dest_ip '215.0.0.0/8'
	list proto 'all'
	option log '1'

config rule
	option target 'ACCEPT'
	option name 'boobs' 
	option src '*'
	option dest '*'
	list src_mac '00:00:00:00:00:00'
	option log '1'
	option enabled '0'
	list proto 'all'

config rule
	option enabled '0'
	option name 'boobs' 
	option src '*'
	option ipset 'boobs' 
	option dest '*'
	option target 'REJECT'
	option log '1'
	list proto 'tcp'
	list proto 'udp'
	option dest_port '443'

config rule
	option src 'lan'
	option dest '*'
	option target 'ACCEPT'
	option name 'boobs' 
	list proto 'all'
	list src_mac '00:00:00:00:00:00'
	option enabled '0'

config rule
	option name 'boobs' 
	option dest '*'
	list dest_ip '100.64.0.0/10'
	option target 'REJECT'
	option src '*'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option dest '*'
	option target 'REJECT'
	list dest_ip '240.0.0.0/4'
	list dest_ip '192.88.99.0/24'
	option src '*'
	option log '1'
	list proto 'all'

config rule
	option src 'lan'
	option dest_port '80 443 22 8080'
	option target 'ACCEPT'
	option name 'boobs' 
	list proto 'tcp'
	list proto 'udp'
	list proto 'icmp'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'

config rule
	option name 'boobs' 
	option src '*'
	option dest '*'
	option target 'DROP'
	option limit '8/minute'
	list src_mac '00:00:00:00:00:00'
	option dest_port '443'
	option enabled '0'

config rule
	option name 'boobs' 
	option src '*'
	option dest '*'
	option dest_port '443'
	option target 'DROP'
	option limit '8/min'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	option enabled '0'

config rule
	option name 'boobs' 
	option src '*'
	option dest '*'
	option dest_port '443'
	option target 'DROP'
	option limit '3/min'
	list src_mac '00:00:00:00:00:00'
	option enabled '0'

config rule
	option name 'boobs' 
	option src 'lan'
	option ipset 'boobs' 
	option dest 'private'
	list dest_ip '192.168.2.2'
	option target 'ACCEPT'
	list src_ip '192.168.1.1/28'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest 'Guest'
	option target 'DROP'
	option log '1'
	list dest_ip '192.168.3.1/29'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest 'private'
	option target 'DROP'
	option log '1'
	list dest_ip '192.168.2.1/28'
	list proto 'all'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_ip '192.168.1.1/28'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest 'server'
	option target 'DROP'
	list proto 'all'
	list dest_ip '192.168.37.1/28'

config rule
	option name 'boobs' 
	option src '*'
	list src_ip '192.168.10.0/23'
	list src_ip '192.168.12.0/22'
	list src_ip '192.168.16.0/20'
	list src_ip '192.168.32.0/19'
	list src_ip '192.168.64.0/18'
	list src_ip '192.168.128.0/17'
	option dest '*'
	option target 'REJECT'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest 'lan'
	option target 'REJECT'
	option log '1'
	list dest_ip '192.168.0.0/16'
	list dest_ip '!192.168.100.1'
	list proto 'all'

config rule
	option src '*'
	option dest '*'
	option target 'ACCEPT'
	option name 'boobs' 
	list dest_ip '169.254.0.0/16'
	list dest_ip 'fe80::/10'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest '*'
	list dest_ip '255.255.255.255'
	option target 'REJECT'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest '*'
	list dest_ip '192.168.1.255'
	option target 'REJECT'
	option log '1'
	list proto 'all'

config rule
	option src 'lan'
	option dest '*'
	list dest_ip '224.0.0.0/4'
	option target 'REJECT'
	option name 'boobs' 
	list proto 'all'

config rule
	option name 'boobs' 
	list dest_ip '224.0.0.0'
	list dest_ip '224.0.0.255'
	option target 'REJECT'
	option src 'lan'
	option dest '*'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest '*'
	list dest_ip 'ff00::/8'
	option target 'REJECT'
	list proto 'all'

config rule
	option src 'lan'
	option target 'REJECT'
	option name 'boobs' 
	list proto 'udp'
	option src_port '1900'
	option dest_port '1900'
	list dest_ip '239.255.255.250'
	list dest_ip 'FF02::C'
	list dest_ip 'FF05::C'
	list dest_ip 'FF08::C'
	list dest_ip 'FF0E::C'
	list dest_ip 'ff00::c/fff0:ffff:ffff:ffff:ffff:ffff:ffff:ffff'
	option dest '*'

config rule
	option src 'lan'
	option src_port '5355'
	list dest_ip '224.0.0.252'
	list dest_ip 'FF02::1:3'
	option dest_port '5355'
	option target 'REJECT'
	list proto 'tcp'
	list proto 'udp'
	option name 'boobs' 
	option dest '*'

config rule
	option name 'boobs' 
	option src 'lan'
	option target 'REJECT'
	option helper 'netbios-ns'
	option dest '*'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'lan'
	option src_port '137'
	option dest '*'
	option dest_port '137'
	option target 'REJECT'

config rule
	list proto 'tcp'
	option src 'lan'
	option src_port '139'
	option dest '*'
	option dest_port '139'
	option target 'REJECT'
	option name 'boobs' 

config rule
	option name 'boobs' 
	list proto 'udp'
	option src 'lan'
	option src_port '138'
	option dest '*'
	option dest_port '138'
	option target 'REJECT'

config rule
	list proto 'udp'
	option src 'lan'
	option src_port '5353'
	option dest '*'
	list dest_ip '224.0.0.251'
	list dest_ip 'ff02::fb'
	option dest_port '5353'
	option target 'REJECT'
	option name 'boobs' 

config rule
	option src 'lan'
	option src_port '3702'
	list dest_ip '239.255.255.250'
	list dest_ip 'FF02::C'
	option dest_port '3702'
	option target 'REJECT'
	option name 'boobs' 
	option dest '*'

config rule
	option target 'REJECT'
	option helper 'ftp'
	option name 'boobs' 
	option src 'lan'
	option dest '*'
	list proto 'all'

config rule
	option name 'boobs' 
	option src '*'
	option target 'ACCEPT'
	option dest_port '53'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest_port '67 68 546 547 123'
	option target 'ACCEPT'
	list proto 'udp'

config rule
	option name 'boobs' 
	option target 'ACCEPT'
	option src 'lan'
	option dest_port '53'
	list dest_ip '192.168.1.1'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest '*'
	option dest_port '853'
	option target 'ACCEPT'

config rule
	option name 'boobs' 
	list proto 'icmp'
	option src 'lan'
	option target 'ACCEPT'
	option dest '*'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'

config rule
	option name 'boobs' 
	option src 'lan'
	option target 'REJECT'
	list proto 'all'

config rule
	option name 'boobs' 
	list proto 'l2tp'
	option target 'REJECT'
	option src 'lan'
	option dest '*'
	option log '1'
	option enabled '0'

config rule
	option name 'boobs' 
	option src '*'
	option dest '*'
	option target 'REJECT'
	option helper 'pptp'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option src '*'
	option dest '*'
	option target 'REJECT'
	option helper 'tftp'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	list proto 'rdp'
	option src '*'
	option target 'REJECT'
	option dest '*'
	option log '1'

config rule
	option name 'boobs' 
	list proto 'sctp'
	option src '*'
	option dest '*'
	option target 'REJECT'
	option log '1'

config rule
	option name 'boobs' 
	list proto 'udplite'
	option src '*'
	option dest '*'
	option target 'REJECT'
	option log '1'

config rule
	option target 'REJECT'
	list proto 'udp'
	option src 'lan'
	option dest '*'
	option dest_port '443'
	option name 'boobs' 

config rule
	option dest_port '51820'
	option target 'ACCEPT'
	option src '*'
	option dest '*'
	list proto 'tcp'
	list proto 'udp'
	option name 'boobs' 
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_ip '0.0.0.0/0'
	list dest_ip '45.82.64.25'
	list dest_ip '185.107.80.114'
	list dest_ip '89.187.171.225'
	list dest_ip '185.132.132.113'
	list dest_ip '146.70.174.66'
	list dest_ip '146.70.230.98'
	list dest_ip '109.236.81.160'
	list dest_ip '169.150.218.21'
	list dest_ip '185.183.34.165'
	list dest_ip '185.165.242.20'
	list dest_ip '169.150.218.31'
	list dest_ip '185.177.125.213'
	list dest_ip '212.102.51.115'
	list dest_ip '149.22.80.109'
	list dest_ip '146.70.202.82'

config rule
	option target 'ACCEPT'
	option src 'lan'
	list proto 'tcp'
	option dest '*'
	option dest_port '80 443'
	option name 'boobs' 

config rule
	option name 'boobs' 
	list proto 'tcp'
	option src 'lan'
	option dest '*'
	option dest_port '993'
	option target 'ACCEPT'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'

config rule
	list proto 'udp'
	option src 'lan'
	option dest_port '500 4500'
	option target 'ACCEPT'
	option dest '*'
	option ipset 'boobs' 
	option name 'boobs' 
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'

config rule
	list proto 'tcp'
	option src 'lan'
	option dest_port '143'
	option target 'ACCEPT'
	option dest '*'
	option ipset 'boobs' 
	option name 'boobs' 
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest '*'
	option target 'ACCEPT'
	option helper 'sip'
	list proto 'all'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'

config rule
	option dest_port '50318 59234'
	option target 'ACCEPT'
	option src 'lan'
	option dest '*'
	option name 'boobs' 
	option ipset 'boobs' 
	option start_time '09:00:00'
	option stop_time '22:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	option limit '50/second'

config rule
	option src 'lan'
	option target 'ACCEPT'
	list proto 'tcp'
	option dest_port '4244 5222 5223 5228 5242'
	option dest '*'
	option name 'boobs' 
	option start_time '07:00:00'
	option stop_time '22:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	option limit '50/second'
	option ipset 'boobs' 

config rule
	list proto 'udp'
	option dest_port '3478 45395'
	option target 'ACCEPT'
	option src 'lan'
	option dest '*'
	option ipset 'boobs' 
	option name 'boobs' 
	option weekdays 'Sun Mon Tue Wed Thu Fri Sat'
	option start_time '09:00:00'
	option stop_time '21:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	option limit '50/second'

config rule
	option name 'boobs' 
	list proto 'udp'
	option src 'lan'
	option dest 'wan'
	option dest_port '9000 5004'
	option target 'ACCEPT'
	list src_mac '00:00:00:00:00:00'
	option enabled '0'
	option limit '100/second'

config rule
	option name 'boobs' 
	list proto 'tcp'
	option src 'lan'
	option dest '*'
	option dest_port '8443 8444'
	option target 'ACCEPT'
	option limit '10/second'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'

config rule
	option dest_port '5000'
	option target 'ACCEPT'
	list proto 'tcp'
	option dest '*'
	option src 'lan'
	option name 'boobs' 
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'

config rule
	option target 'ACCEPT'
	option dest_port '5551'
	list proto 'tcp'
	option dest '*'
	option src 'lan'
	option name 'boobs' 
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'

config rule
	option name 'boobs' 
	list proto 'tcp'
	option src 'lan'
	option dest '*'
	option dest_port '5222'
	option target 'ACCEPT'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	option limit '10/second'
	option ipset 'boobs' 

config rule
	option name 'boobs' 
	list proto 'tcp'
	option src 'lan'
	option dest '*'
	option dest_port '5228'
	option target 'ACCEPT'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	list src_mac '00:00:00:00:00:00'
	option ipset 'boobs' 

config rule
	option name 'boobs' 
	option src 'lan'
	list src_mac '00:00:00:00:00:00'
	option dest '*'
	option target 'ACCEPT'
	list proto 'all'
	option enabled '0'

config rule
	option name 'boobs' 
	option src 'lan'
	option dest '*'
	option target 'ACCEPT'
	option log '1'
	list src_mac '00:00:00:00:00:00'
	list proto 'all'

config rule
	option src 'Guest'
	option dest 'lan'
	option target 'DROP'
	option name 'boobs' 
	list dest_ip '192.168.1.1/28'
	list proto 'all'

config rule
	option src 'Guest'
	option target 'ACCEPT'
	option dest_port '67 68'
	option name 'boobs' 
	list proto 'udp'
	option limit '1/second'
	option start_time '09:00:00'
	option stop_time '22:00:00'

config rule
	option dest_port '53'
	option target 'ACCEPT'
	option src 'Guest'
	option name 'boobs' 

config rule
	option name 'boobs' 
	option src 'Guest'
	option target 'DROP'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'Guest'
	option dest_port '80 443'
	list proto 'tcp'
	option dest 'Wireguard'
	option target 'ACCEPT'
	option start_time '09:00:00'
	option stop_time '22:00:00'

config rule
	option name 'boobs' 
	option src 'private'
	option dest 'lan'
	option target 'DROP'
	list dest_ip '192.168.1.1/28'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'private'
	option dest_port '67 68 123'
	option target 'ACCEPT'
	list proto 'tcp'
	list proto 'udp'

config rule
	option name 'boobs' 
	option src 'private'
	option dest_port '53'
	option target 'ACCEPT'
	list proto 'tcp'
	list proto 'udp'

config rule
	option name 'boobs' 
	list proto 'icmp'
	option src 'private'
	option target 'ACCEPT'
	option dest '*'
	option enabled '0'

config rule
	option name 'boobs' 
	option src 'private'
	option target 'REJECT'
	list proto 'all'

config rule
	option src 'private'
	option dest 'private'
	option target 'ACCEPT'
	option name 'boobs' 
	list src_ip '192.168.2.1/28'
	list src_ip '!192.168.2.1'
	list dest_ip '192.168.2.1/28'
	list dest_ip '!192.168.2.1'
	list proto 'all'

config rule
	option src 'private'
	list src_mac '00:00:00:00:00:00'
	option target 'ACCEPT'
	option dest '*'
	option name 'boobs' 
	option dest_port '80 443 5228 853 53'
	list proto 'tcp'
	list proto 'udp'

config rule
	option name 'boobs' 
	list proto 'igmp'
	option src 'private'
	list src_mac '00:00:00:00:00:00'
	option dest '*'
	option target 'ACCEPT'
	option log '1'

config rule
	option name 'boobs' 
	list proto 'igmp'
	option src 'wan'
	option dest 'private'
	list dest_ip '192.168.2.2'
	option target 'ACCEPT'
	option limit '100/second'
	option log '1'

config rule
	option src 'private'
	option target 'ACCEPT'
	option dest '*'
	option name 'boobs' 
	option dest_port '80 443'
	list proto 'tcp'
	list proto 'udp'

config rule
	option src 'private'
	option target 'ACCEPT'
	option dest 'wan'
	option name 'boobs' 
	option dest_port '51820'
	list proto 'tcp'
	list proto 'udp'

config rule
	option name 'boobs' 
	option src 'private'
	option target 'ACCEPT'
	option dest '*'
	list proto 'tcp'
	list proto 'udp'
	list src_ip '!192.168.2.2'

config rule
	option name 'boobs' 
	option dest_port '53 67 68 123'
	option target 'ACCEPT'
	option src 'server'
	list proto 'tcp'
	list proto 'udp'

config rule
	option name 'boobs' \''cause other rules aren'\''t blocking]'
	option src 'server'
	option target 'DROP'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'server'
	option dest 'server'
	option target 'ACCEPT'
	list proto 'all'
	list dest_ip '!192.168.4.1'

config rule
	option name 'boobs' 
	option src 'server'
	option dest 'wan'
	option target 'ACCEPT'
	list dest_ip '!192.168.2.1/28'
	list dest_ip '!192.168.3.1/28'
	list proto 'all'

config rule
	option name 'boobs' 
	option src '*'
	option dest 'server'
	option target 'REJECT'
	option enabled '0'

config rule
	option src 'serverlocal'
	option dest_port '67 68'
	option target 'ACCEPT'
	option name 'boobs' 

config rule
	option name 'boobs' 
	list proto 'ipencap'
	option src '*'
	option dest '*'
	option target 'REJECT'
	option log '1'

config rule
	option name 'boobs' 
	list proto 'egp'
	option src '*'
	option dest '*'
	option target 'REJECT'
	option log '1'

config rule
	option name 'boobs' 
	list proto 'hmp'
	option src '*'
	option dest '*'
	option target 'DROP'
	option log '1'

config rule
	option name 'boobs' 
	list proto 'gre'
	option src '*'
	option dest '*'
	option target 'REJECT'
	option log '1'

config rule
	option name 'boobs' 
	option target 'REJECT'
	option helper 'amanda'
	option dest '*'
	option src '*'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option target 'REJECT'
	option helper 'RAS'
	option src '*'
	option dest '*'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option target 'REJECT'
	option helper 'Q.931'
	option src '*'
	option dest '*'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option target 'REJECT'
	option helper 'irc'
	option src '*'
	option dest '*'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option src '*'
	option dest '*'
	option target 'REJECT'
	option helper 'sane'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option src '*'
	option dest '*'
	option target 'REJECT'
	option helper 'snmp'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option src '*'
	option dest '*'
	option target 'REJECT'
	option helper 'rtsp'
	option log '1'
	list proto 'all'

config rule
	option target 'REJECT'
	option dest '*'
	option src 'lan'
	option name 'boobs' 
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'private'
	option dest '*'
	option target 'REJECT'
	option log '1'
	list proto 'all'

config rule
	option src 'Guest'
	option dest '*'
	option target 'REJECT'
	option name 'boobs' 
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option src 'server'
	option dest '*'
	option target 'REJECT'
	option log '1'
	list proto 'all'

config rule
	option name 'boobs' 
	option src '*'
	option dest '*'
	option target 'ACCEPT'
	option enabled '0'

config forwarding
	option src 'Guest'
	option dest 'wan'

config forwarding
	option src 'server'
	option dest 'wan'

config forwarding
	option src 'wan'
	option dest 'server'

config include 'pbr'
	option fw4_compatible '1'
	option type 'script'
	option path '/usr/share/pbr/firewall.include'

config ipset
	option name 'boobs' 
	option family 'ipv4'
	option loadfile '/etc/luci-uploads/Netflix_IPv4.txt'
	list match 'dest_net'
	list match 'dest_ip'

config forwarding
	option src 'wan'
	option dest 'Wireguard'

RSHARM · September 10, 2025, 11:19am

Netflix_IPv4.txt

# 2017-10-01T14:14:44+00:00
108.175.32.0/20
108.175.34.0/24
108.175.35.0/24
192.173.64.0/18
198.38.100.0/24
198.38.101.0/24
198.38.108.0/24
198.38.109.0/24
198.38.110.0/24
198.38.111.0/24
198.38.112.0/24
198.38.113.0/24
198.38.114.0/24
198.38.115.0/24
198.38.116.0/24
198.38.117.0/24
198.38.118.0/24
198.38.119.0/24
198.38.120.0/24
198.38.121.0/24
198.38.124.0/24
198.38.125.0/24
198.38.96.0/19
198.38.96.0/24
198.38.97.0/24
198.38.98.0/24
198.38.99.0/24
198.45.48.0/20
198.45.48.0/24
198.45.49.0/24
198.45.56.0/24
198.45.57.0/24
23.246.0.0/18
23.246.14.0/24
23.246.15.0/24
23.246.16.0/24
23.246.17.0/24
23.246.20.0/24
23.246.2.0/24
23.246.22.0/24
23.246.23.0/24
23.246.24.0/24
23.246.25.0/24
23.246.26.0/24
23.246.27.0/24
23.246.28.0/24
23.246.29.0/24
23.246.30.0/24
23.246.3.0/24
23.246.31.0/24
23.246.36.0/24
23.246.4.0/24
23.246.42.0/24
23.246.46.0/24
23.246.47.0/24
23.246.48.0/24
23.246.49.0/24
23.246.50.0/24
23.246.5.0/24
23.246.51.0/24
23.246.52.0/24
23.246.54.0/24
23.246.55.0/24
23.246.56.0/24
23.246.57.0/24
23.246.58.0/24
23.246.6.0/24
23.246.7.0/24
37.77.184.0/21
37.77.186.0/24
37.77.187.0/24
37.77.188.0/24
37.77.189.0/24
37.77.190.0/24
37.77.191.0/24
45.57.0.0/17
45.57.1.0/24
45.57.11.0/24
45.57.14.0/24
45.57.15.0/24
45.57.16.0/24
45.57.17.0/24
45.57.18.0/24
45.57.19.0/24
45.57.20.0/24
45.57.2.0/24
45.57.21.0/24
45.57.22.0/24
45.57.23.0/24
45.57.3.0/24
45.57.36.0/24
45.57.37.0/24
45.57.4.0/24
45.57.42.0/24
45.57.44.0/24
45.57.45.0/24
45.57.48.0/24
45.57.49.0/24
45.57.5.0/24
45.57.54.0/24
45.57.55.0/24
45.57.58.0/24
45.57.59.0/24
45.57.60.0/24
69.53.225.0/24
207.45.72.0/22
207.45.73.0/24
45.57.40.0/24
45.57.8.0/23
45.57.8.0/24
45.57.9.0/24
192.173.64.0/24
192.173.65.0/24
192.173.66.0/24
192.173.67.0/24
192.173.68.0/24
208.75.76.0/24
69.53.230.0/24
69.53.231.0/24
69.53.233.0/24
69.53.235.0/24
69.53.240.0/24
69.53.241.0/24
69.53.242.0/24
69.53.245.0/24
69.53.246.0/24
69.53.254.0/24

frollic · September 10, 2025, 11:23am

doesn't match your "Packet Field Match" setup to start with.

dave14305 · September 10, 2025, 1:46pm

Someone’s thinking about boobs a lot…

RSHARM · September 18, 2025, 6:45am

doesn't match your "Packet Field Match" setup to start with.

You mean it should be source ip ?

lleachii · September 20, 2025, 10:47am

Just to be clear - these are invalid as IPs and are not standard nomenclature for CIDR ranges.

Additionally, using partial sentences and sparse details makes it difficult to understand your progress.

Is this related to your other thread where you desire to configure invalid ipset types?

It may be best to create/use your own thread instead of posting to a thread with ~2200 posts.

RSHARM · September 21, 2025, 10:16am

IPset is CIDR List

xxx.xxx.xxx.xxx/xxx

https://raw.githubusercontent.com/lord-alfred/ipranges/refs/heads/main/facebook/ipv4_merged.txt
https://raw.githubusercontent.com/lord-alfred/ipranges/refs/heads/main/google/ipv4_merged.txt
https://raw.githubusercontent.com/hillout/ipranges/refs/heads/main/netflix/netflix.txt
https://raw.githubusercontent.com/touhidurrr/iplist-youtube/refs/heads/main/lists/cidr4.txt

I checked the files are populated.

This rule causes internet to stop working
Also sometimes PBR randomly break so maybe IPSet maybe not be breaking it.
But the PBR rules with IPsets are not working

RSHARM · September 21, 2025, 11:06am

Weird IPsets works when downloaded and stored in /tmp by Script (also here I am using option loadfile and not the GUI) -

and when in luci uploads it doesn't work

lleachii · September 21, 2025, 12:34pm

~~To assist you, please provide the config.~~ Nevemind, it's that every config is named 'Boobs' - again, it's difficult to follow your posts
Is this related to your other threads and posts about ipsets?

Are you saying the 'loadfile' option works when making a rule on the command line for uci-uploads, but not in the web GUI?

Have you used the script to test saving the file to uci-uploads?

lleachii · September 21, 2025, 12:49pm

Please provide helpful information to assist you.

What files?

Please provide details on how the files are saved to the OpenWrt.

Please clarify this statement.

Is it related to your deleted postings about PBR and other threads about ipsets? (I ask because you included extra information here.)

(Making multiple threads for the same issue is confusing and difficult for the community to follow.)

This was discussed before, but you deleted all your posts in the thread making reference to it.

_bernd · September 21, 2025, 1:34pm

By now I'm so pissed of by this behavior. If I had moderator privileges I would insta ban these users.
Analogy: going to the public pool, scream around, taking a dump into the pool and leave.

@RSHARM as @lleachii said it already to you.
One thread. With background information and configs. And describe what and how you tested, what was your expectations and why aren't they hold. And stop deleting posts for fukk sake!

antonk · September 21, 2025, 2:37pm

I just want to remind everyone that the OP is not responsible for previous instances of such behavior by other people. Obviously the OP is trying to get help, and they are not well-acquainted with the best ways to achieve that. So they should be shown how, but aggressive tones are completely unnecessary.