LuCI: IP range in Firewall rules

Example - 192.168.1.3 - 192.168.255.255
With 22.04+ with nftables can use the list src_ip specification to do this list src_ip "192.168.1.3-192.168.255.255"

  • Use CIDR format
  • Use a list

In your cause you could:

  • Make rule(s) excluding (i.e. !=) .1 and .2
  • Then make a rule for 192.168.255.0/24

Since valid CIDR format would need to be used, this would be less confusing and more importantly - visually match the underlying nft/iptables rules created.

1 Like
  • !192.168.255.1
  • !192.168.255.2
2 Likes

You can use CIDR ranges.

Ipsets

You can create a file full of ip addresses mac adresses and reference them in rules.

1 Like