Need Help with IPset

[RSHARM]

Included File - https://github.com/dibdot/DoH-IP-blocklists/blob/master/doh-ipv4.txt

Sometimes (1/15) the block works

Also how to update the "includes File" in IPSet from URL?

[vgaetera]

opkg update
opkg install banip luci-app-banip
uci set banip.global.ban_enabled="1"
uci add_list banip.global.ban_feed="doh"
uci commit banip
service banip restart
service rpcd restart

[frollic]

OOM perhaps?
hardly BanIPs fault.

[frollic]

That would probably be the PBR package.

[RSHARM]

I am creating a allow list for VPN's IPs from online URL

[frollic]

Then it's not the PBR package ,)

But why?
There's no restriction for outgoing traffic.

[RSHARM]

for a strong firewall that only allow VPN IPs on VPN ports

[frollic]

Still insufficient info.

Incoming then, I'd assume.

[RSHARM]

VPN doesnt need incoming traffic

[frollic]

Still NFI what's you're trying to achieve.

But good luck with incoming VPN traffic, when the fw isn't open.

[RSHARM]

scriptzteam/ProtonVPN-VPN-IPs/blob/main/entry_ips.txt

Why I need incoming ? Currently all incoming is blocked on my router and VPN works

[krazeh]

@RSHARM

for a strong firewall that only allow VPN IPs on VPN ports

What is this supposed to mean?

[frollic]

That's the only scenario, I can think of, where you'd need the VPN provider's IPs.

Unless you're blocking all outgoing traffic, but Proton VPN.

[lleachii]

@RSHARM - Please use complete sentences to fully describe your issue to the community. We'll be better able to assist if you employ clear, detailed information, describe your screenshots textually, etc. We're unable to guess why you wish to add Proton's VPN endpoint list to your firewall. You have to explain.

@RSHARM

(post deleted by author)

As previously noted, please be mindful of deleting posts that alter the context of the conversation.

EDIT:

@RSHARM

I also need IpSet for VPN IP List. BanIP will not help with that

• If this is your reason, I don't understand the deleted post, so please explain the current discussion?
• If this is not your reasoning, please clarify nonetheless
• Why won't BanIP help? (having read the thread - it seems the issue is you failed to provide enough information to assist, but alas it seems as if you deleted your posting that prompted the developer's response there as well)

Implementing such a rule will likely break your Internet connection for other reasons (i.e. not considering DNS, NTP or IPv6, etc.). It's difficult to determine what you desire, since you fail to share your reasoning or use case.