[SOLVED] Http, traffic-rules, ipsets, ping - why a drop-rule is not working?

Installing and Using OpenWrt Network and Wireless Configuration
1

Hello,

my IPSet has an entry for 185.60.217.35.

When I ping this IP it’s correctly blocked by a traffic-rule that uses this IPSet.

When I enter this IP in browser, I see a “oups, sorry” landingpage, so its not blocked.

When I enter facebook dot com in browser, the site loads normally. But its intended that it is blocked.

Does anyone know if I can block a https website with this approach at all? Or why this is happen this way? How do I change the traffic-rule, that is recognise the url (without using DNS filtering)?

Thanks for any feedback!

2

You can't do it without DNS filtering on router level, unless you collect all IPs belonging to Meta.

3

I have all IPs that are used by facebook from ASN databases. So the IPSet is about several hundret IP ranges. And this IP above is definitely inside this list.

4

Post your firewall rule and snippet from ipset.

5

you can do it with a big ASN ip list, but honestly that approach is always kinda messy and unreliable. even if you have a huge list, services like Facebook keep changing things behind the scenes, so you end up chasing ranges and still miss stuff or block things you didn’t mean to.

instead of relying on a database like that, its better to just force dns through your gateway and let dnsmasq populate the ipset based on the domain. that way you’re always blocking the actual ips the client is using, not guessing from a static list.

you’d need something like this to force dns:

iptables -t nat -A PREROUTING -p udp --dport 53 -j REDIRECT
iptables -t nat -A PREROUTING -p tcp --dport 53 -j REDIRECT

and then just block the ipset:

iptables -I FORWARD -m set --match-set facebookset dst -j REJECT

your current state of firewall will help in debugging in why it's not working right now

6

One question. For 60 minutes I was trying to copy the config output from /etc/config/firewall to clipboard or to a file on my pc. Damn, this is ridiculous difficult. So my question is: how do I copy the config output here?

I tried vim /etc/config/firewall but vim is not able to copy anyhow. And I tried cat /etc/config/firewall > ~/file.txt but this saves only to the router, I guess.

Why linux is so difficult to use that even the simpliest functions are not possible without having a finished exam in IT technology?

7

ah, you can just cat and select it with your mouse and then press the copy shortcut on your pc. that should copy to your clipboard.

8

yes, but I never get the whole text this way.. I just need to scroll 6 times when I want to copy this text, while holding down the mouse. lmao! xD Is there a better way? Sorry, but logged in as ssh root via my cli on linux is just a difficult thing right now. I had never the need for doing so before.

9

Are you sure the browser is using only IPv4 when browsing to facebook.com?

10

You can always copy the files (via scp) from your router to your computer. Open the file in your favorite GUI based text editor > select-all > copy > paste into your browser composer.

11

If you're on windows, use winscp to edit/copy it ?

12

Here are my firewall configs. Sorry for the delay, now I use visual studio code for establishing the ssh connection. Its more easy to copy from the outputs than from putty or other clis, Ive tested them all! :slight_smile:

/ # cat /etc/config/firewall

config defaults
option input 'DROP'
option output 'ACCEPT'
option forward 'DROP'
option synflood_protect '1'

config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
list network 'wifi'

config zone
option name 'wan'
option input 'DROP'
option output 'ACCEPT'
option forward 'DROP'
option masq '1'
option mtu_fix '1'
list network 'wan'
list network 'wan6'

config forwarding
option src 'lan'
option dest 'wan'

config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'

config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'

config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'

config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'

config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'

config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'

config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'

config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'

config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'

// edit: the default rules end here...

config rule
option src 'lan'
option name 'Facebook-BlockIPv4Set'
option family 'ipv4'
option ipset 'Facebook-IPv4Set'
option target 'REJECT'
option dest 'wan'
list proto 'all'

config rule
option src 'lan'
option name 'Facebook-BlockIPv6Set'
option family 'ipv4'
option ipset 'Facebook-IPv6Set'
option target 'REJECT'
option dest 'wan'
list proto 'all'

config rule
option dest 'wan'
option name 'DebugIPSets'
option family 'ipv4'
option ipset 'Debug'
option target 'REJECT'
option src 'lan'

config rule
option src 'lan'
option dest 'wan'
option name 'http'
list proto 'tcp'
option dest_port '80'
option target 'ACCEPT'

config rule
option src 'lan'
option dest 'wan'
option name 'https'
list proto 'tcp'
option dest_port '443'
option target 'ACCEPT'

config rule
option src 'lan'
option dest 'wan'
option name 'smtps, imap'
list proto 'tcp'
option dest_port '25 465 993 4190'
option target 'ACCEPT'

config rule
option src 'lan'
option dest 'wan'
option name 'ssh'
list proto 'tcp'
option dest_port '22 7777'
option target 'ACCEPT'

config rule
option src 'lan'
option dest 'wan'
option name 'ntp'
option dest_port '123'
option target 'ACCEPT'
list proto 'udp'

config rule
option src 'lan'
option dest 'wan'
option name 'openVPN'
option dest_port '1194'
option target 'ACCEPT'
list proto 'udp'

config rule
option src 'lan'
option dest 'wan'
option name 'wireguard'
option dest_port '51820'
option target 'ACCEPT'
list proto 'udp'

config rule
option src 'lan'
option dest 'wan'
option name 'xmpp'
list proto 'tcp'
option dest_port '5222'
option target 'ACCEPT'

config rule
option src 'lan'
option dest 'wan'
option name 'openPGP Schlüsselserver'
list proto 'tcp'
option dest_port '11371'
option target 'ACCEPT'

config rule
option src 'lan'
option dest 'wan'
option name 'Blocke alles'
option target 'DROP'
list proto 'all'




config ipset
option name 'Facebook-IPv4Set'
option comment 'Derivate from ASN April 2026'
option family 'ipv4'
option loadfile '/etc/luci-uploads/fbips.txt'
option counters '1'
list match 'dest_ip'

config ipset
option name 'Facebook-IPv6Set'
option comment 'Derivate from ASN in April 2026'
option family 'ipv6'
list match 'dest_ip'
option loadfile '/etc/luci-uploads/fbips.txt'
option counters '1'

config ipset
option name 'Debug'
option comment 'Zum testen'
option family 'ipv4'
option loadfile '/etc/luci-uploads/test.txt'
option timeout '0'
list match 'dest_ip'

/ #

// edits from me, also empty spaces.

13

No, Im not sure. How can I figure that out? But the IPv6 IPs are in the IPSets, too. So even in this case it should be blocking?

edit: yes, it was using IPv6, but after set off, still can connect to fb and IP.

14

from your config it actually looks like it should be working, so the issue is probably somewhere around it, not the rule itself.

there are a couple things that could cause this. are you sure your client isn’t using an external dns server or DoH? if it is, it can resolve Facebook to different ips and bypass what you expect.

if not, it’s probably rule order or the set not being hit.

can you share:

iptables -L -v -n
ipset list Facebook-IPv4Set
16

are you sure your client isn’t using an external dns server or DoH? if it is, it can resolve Facebook to different ips and bypass what you expect.

No, I'm not sure. I'll check if its blocking without adblocking DNS from librewolf, (and mulvad and ungoogled Chromium). The Handy-Browser Vanadium has such a feature, too, I guess.

libreofficedns
libreofficedns544×687 44.1 KB

17

DNS Proxy Librewolf
DNS Proxy Librewolf819×758 46.5 KB

Seems that Libre also Proxy the DNS.When I turned this (both) settings off, I can still connect to facebook dot com and the 185.60.217.35. The ping is still not possible.

$ping facebook.com
PING facebook.com (185.60.217.35) 56(84) bytes of data.
...

edit:

Yes, the libre was using IPv6. I set this off, but no change, I can still connect to facebook and the IP.

18

You’ll need to run the nftables commands from the router, not iptables from the Linux machine.

nft list sets
nft list chain inet fw4 forward
nft list chain inet fw4 forward_lan
19

Ehem! cough I knew that! It was a test. :stuck_out_tongue: :see_no_evil_monkey:

/ # nft list sets
table inet fw4 {
        set Facebook-IPv4Set {
                type ipv4_addr
                comment "Derivate from ASN April 2026"
                elements = { 31.13.24.0, 31.13.64.0,
                             31.13.65.0, 31.13.66.0,
                             31.13.67.0, 31.13.68.0,
                             31.13.69.0, 31.13.70.0,
                             31.13.71.0, 31.13.72.0,
                             31.13.73.0, 31.13.74.0,
                             31.13.75.0, 31.13.76.0,
                             31.13.77.0, 31.13.78.0,
                             31.13.79.0, 31.13.80.0,
                             31.13.81.0, 31.13.82.0,
                             31.13.83.0, 31.13.84.0,
                             31.13.85.0, 31.13.86.0,
                             31.13.87.0, 31.13.88.0,
                             31.13.89.0, 31.13.90.0,
                             31.13.91.0, 31.13.92.0,
                             31.13.93.0, 31.13.94.0,
                             31.13.95.0, 31.13.96.0,
                             45.64.40.0, 57.144.0.0,
                             57.144.2.0, 57.144.4.0,
                             57.144.6.0, 57.144.8.0,
                             57.144.10.0, 57.144.12.0,
                             57.144.14.0, 57.144.16.0,
                             57.144.18.0, 57.144.20.0,
                             57.144.22.0, 57.144.24.0,
                             57.144.26.0, 57.144.28.0,
                             57.144.30.0, 57.144.32.0,
                             57.144.34.0, 57.144.36.0,
                             57.144.38.0, 57.144.40.0,
                             57.144.42.0, 57.144.44.0,
                             57.144.46.0, 57.144.48.0,
                             57.144.50.0, 57.144.52.0,
                             57.144.54.0, 57.144.56.0,
                             57.144.58.0, 57.144.60.0,
                             57.144.62.0, 57.144.64.0,
                             57.144.66.0, 57.144.68.0,
                             57.144.70.0, 57.144.72.0,
                             57.144.74.0, 57.144.76.0,
                             57.144.78.0, 57.144.80.0,
                             57.144.82.0, 57.144.84.0,
                             57.144.86.0, 57.144.88.0,
                             57.144.90.0, 57.144.92.0,
                             57.144.94.0, 57.144.96.0,
                             57.144.98.0, 57.144.100.0,
                             57.144.102.0, 57.144.104.0,
                             57.144.106.0, 57.144.108.0,
                             57.144.110.0, 57.144.112.0,
                             57.144.114.0, 57.144.116.0,
                             57.144.118.0, 57.144.120.0,
                             57.144.122.0, 66.220.144.0,
                             66.220.152.0, 69.63.176.0,
                             69.63.178.0, 69.63.184.0,
                             69.171.224.0, 69.171.239.0,
                             69.171.240.0, 69.171.250.0,
                             69.171.255.0, 74.119.76.0,
                             102.132.96.0, 102.132.97.0,
                             102.132.99.0, 102.132.100.0,
                             102.132.101.0, 102.132.103.0,
                             102.132.104.0, 102.132.112.0,
                             102.132.113.0, 102.132.114.0,
                             102.132.115.0, 102.132.116.0,
                             102.132.117.0, 102.132.118.0,
                             102.132.119.0, 102.132.120.0,
                             102.132.121.0, 102.132.122.0,
                             102.132.123.0, 102.132.124.0,
                             102.132.125.0, 102.132.126.0,
                             102.132.127.0, 102.221.188.0,
                             102.221.189.0, 102.221.190.0,
                             102.221.191.0, 103.4.96.0,
                             129.134.0.0, 129.134.25.0,
                             129.134.26.0, 129.134.27.0,
                             129.134.28.0, 129.134.29.0,
                             129.134.30.0, 129.134.31.0,
                             129.134.64.0, 129.134.65.0,
                             129.134.66.0, 129.134.67.0,
                             129.134.68.0, 129.134.69.0,
                             129.134.70.0, 129.134.71.0,
                             129.134.72.0, 129.134.73.0,
                             129.134.74.0, 129.134.75.0,
                             129.134.76.0, 129.134.77.0,
                             129.134.78.0, 129.134.79.0,
                             129.134.112.0, 129.134.113.0,
                             129.134.114.0, 129.134.115.0,
                             129.134.127.0, 129.134.128.0,
                             129.134.129.0, 129.134.130.0,
                             129.134.131.0, 129.134.132.0,
                             129.134.135.0, 129.134.136.0,
                             129.134.137.0, 129.134.138.0,
                             129.134.139.0, 129.134.140.0,
                             129.134.143.0, 129.134.144.0,
                             129.134.147.0, 129.134.148.0,
                             129.134.149.0, 129.134.150.0,
                             129.134.154.0, 129.134.155.0,
                             129.134.156.0, 129.134.157.0,
                             129.134.158.0, 129.134.159.0,
                             129.134.160.0, 129.134.161.0,
                             129.134.163.0, 129.134.164.0,
                             129.134.165.0, 129.134.168.0,
                             129.134.169.0, 129.134.170.0,
                             129.134.171.0, 129.134.172.0,
                             129.134.173.0, 129.134.174.0,
                             129.134.175.0, 129.134.176.0,
                             129.134.177.0, 129.134.178.0,
                             129.134.179.0, 129.134.180.0,
                             129.134.181.0, 129.134.182.0,
                             129.134.183.0, 129.134.184.0,
                             129.134.185.0, 129.134.186.0,
                             129.134.187.0, 147.75.208.0,
                             157.240.0.0, 157.240.1.0,
                             157.240.2.0, 157.240.3.0,
                             157.240.5.0, 157.240.6.0,
                             157.240.7.0, 157.240.8.0,
                             157.240.9.0, 157.240.10.0,
                             157.240.11.0, 157.240.12.0,
                             157.240.13.0, 157.240.14.0,
                             157.240.15.0, 157.240.16.0,
                             157.240.17.0, 157.240.18.0,
                             157.240.19.0, 157.240.20.0,
                             157.240.21.0, 157.240.22.0,
                             157.240.23.0, 157.240.24.0,
                             157.240.25.0, 157.240.26.0,
                             157.240.27.0, 157.240.28.0,
                             157.240.29.0, 157.240.30.0,
                             157.240.31.0, 157.240.96.0,
                             157.240.97.0, 157.240.98.0,
                             157.240.99.0, 157.240.100.0,
                             157.240.101.0, 157.240.128.0,
                             157.240.155.0, 157.240.156.0,
                             157.240.157.0, 157.240.158.0,
                             157.240.159.0, 157.240.160.0,
                             157.240.169.0, 157.240.170.0,
                             157.240.172.0, 157.240.173.0,
                             157.240.174.0, 157.240.175.0,
                             157.240.176.0, 157.240.177.0,
                             157.240.178.0, 157.240.179.0,
                             157.240.180.0, 157.240.181.0,
                             157.240.182.0, 157.240.183.0,
                             157.240.192.0, 157.240.193.0,
                             157.240.194.0, 157.240.195.0,
                             157.240.196.0, 157.240.197.0,
                             157.240.198.0, 157.240.199.0,
                             157.240.200.0, 157.240.201.0,
                             157.240.202.0, 157.240.203.0,
                             157.240.204.0, 157.240.205.0,
                             157.240.206.0, 157.240.207.0,
                             157.240.208.0, 157.240.209.0,
                             157.240.210.0, 157.240.211.0,
                             157.240.212.0, 157.240.213.0,
                             157.240.214.0, 157.240.215.0,
                             157.240.216.0, 157.240.217.0,
                             157.240.218.0, 157.240.219.0,
                             157.240.220.0, 157.240.221.0,
                             157.240.222.0, 157.240.223.0,
                             157.240.224.0, 157.240.225.0,
                             157.240.226.0, 157.240.227.0,
                             157.240.228.0, 157.240.229.0,
                             157.240.231.0, 157.240.232.0,
                             157.240.233.0, 157.240.234.0,
                             157.240.235.0, 157.240.236.0,
                             157.240.237.0, 157.240.238.0,
                             157.240.239.0, 157.240.240.0,
                             157.240.241.0, 157.240.242.0,
                             157.240.243.0, 157.240.244.0,
                             157.240.245.0, 157.240.246.0,
                             157.240.247.0, 157.240.248.0,
                             157.240.249.0, 157.240.250.0,
                             157.240.251.0, 157.240.252.0,
                             157.240.253.0, 157.240.254.0,
                             163.70.128.0, 163.70.129.0,
                             163.70.130.0, 163.70.131.0,
                             163.70.132.0, 163.70.133.0,
                             163.70.134.0, 163.70.135.0,
                             163.70.136.0, 163.70.137.0,
                             163.70.138.0, 163.70.139.0,
                             163.70.140.0, 163.70.141.0,
                             163.70.142.0, 163.70.143.0,
                             163.70.144.0, 163.70.145.0,
                             163.70.146.0, 163.70.147.0,
                             163.70.148.0, 163.70.149.0,
                             163.70.150.0, 163.70.151.0,
                             163.70.152.0, 163.70.153.0,
                             163.70.158.0, 163.70.159.0,
                             163.77.128.0, 163.114.128.0,
                             163.114.129.0, 163.114.130.0,
                             163.114.131.0, 163.114.132.0,
                             163.114.133.0, 163.114.134.0,
                             173.252.64.0, 173.252.88.0,
                             173.252.96.0, 179.60.192.0,
                             179.60.193.0, 179.60.194.0,
                             179.60.195.0, 185.60.216.0,
                             185.60.217.0, 185.60.218.0,
                             185.60.219.0, 185.89.216.0,
                             185.89.218.0, 185.89.219.0,
                             199.201.64.0, 199.201.65.0,
                             199.201.66.0, 199.201.67.0,
                             204.15.20.0 }
        }

[...]

20

[...]

   set Facebook-IPv6Set {
                type ipv6_addr
                comment "Derivate from ASN in April 2026"
                elements = { 2401:db00::,
                             2620:0:1c00::,
                             2620:0:1cfa::,
                             2620:0:1cff::,
                             2620:10d:c090::,
                             2620:10d:c091::,
                             2620:10d:c092::,
                             2620:10d:c093::,
                             2620:10d:c094::,
                             2620:10d:c095::,
                             2620:10d:c096::,
                             2620:10d:c098::,
                             2620:10d:c099::,
                             2620:10d:c09a::,
                             2a03:2880::,
                             2a03:2880:1000::,
                             2a03:2880:2000::,
                             2a03:2880:3000::,
                             2a03:2880:4000::,
                             2a03:2880:5000::,
                             2a03:2880:6000::,
                             2a03:2880:7000::,
                             2a03:2880:f000::,
                             2a03:2880:f001::,
                             2a03:2880:f003::,
                             2a03:2880:f004::,
                             2a03:2880:f005::,
                             2a03:2880:f006::,
                             2a03:2880:f007::,
                             2a03:2880:f008::,
                             2a03:2880:f00a::,
                             2a03:2880:f00c::,
                             2a03:2880:f00d::,
                             2a03:2880:f00e::,
                             2a03:2880:f00f::,
                             2a03:2880:f010::,
                             2a03:2880:f011::,
                             2a03:2880:f012::,
                             2a03:2880:f013::,
                             2a03:2880:f016::,
                             2a03:2880:f017::,
                             2a03:2880:f019::,
                             2a03:2880:f01b::,
                             2a03:2880:f01c::,
                             2a03:2880:f01d::,
                             2a03:2880:f01e::,
                             2a03:2880:f01f::,
                             2a03:2880:f021::,
                             2a03:2880:f023::,
                             2a03:2880:f024::,
                             2a03:2880:f027::,
                             2a03:2880:f028::,
                             2a03:2880:f029::,
                             2a03:2880:f02a::,
                             2a03:2880:f02b::,
                             2a03:2880:f02c::,
                             2a03:2880:f02d::,
                             2a03:2880:f02e::,
                             2a03:2880:f02f::,
                             2a03:2880:f030::,
                             2a03:2880:f031::,
                             2a03:2880:f032::,
                             2a03:2880:f033::,
                             2a03:2880:f034::,
                             2a03:2880:f035::,
                             2a03:2880:f036::,
                             2a03:2880:f037::,
                             2a03:2880:f038::,
                             2a03:2880:f03a::,
                             2a03:2880:f03b::,
                             2a03:2880:f03d::,
                             2a03:2880:f03e::,
                             2a03:2880:f03f::,
                             2a03:2880:f040::,
                             2a03:2880:f041::,
                             2a03:2880:f042::,
                             2a03:2880:f043::,
                             2a03:2880:f044::,
                             2a03:2880:f045::,
                             2a03:2880:f046::,
                             2a03:2880:f047::,
                             2a03:2880:f048::,
                             2a03:2880:f04a::,
                             2a03:2880:f04b::,
                             2a03:2880:f04c::,
                             2a03:2880:f04d::,
                             2a03:2880:f04e::,
                             2a03:2880:f04f::,
                             2a03:2880:f050::,
                             2a03:2880:f052::,
                             2a03:2880:f053::,
                             2a03:2880:f054::,
                             2a03:2880:f055::,
                             2a03:2880:f056::,
                             2a03:2880:f057::,
                             2a03:2880:f058::,
                             2a03:2880:f059::,
                             2a03:2880:f05a::,
                             2a03:2880:f05b::,
                             2a03:2880:f05c::,
                             2a03:2880:f05d::,
                             2a03:2880:f05e::,
                             2a03:2880:f060::,
                             2a03:2880:f061::,
                             2a03:2880:f065::,
                             2a03:2880:f066::,
                             2a03:2880:f067::,
                             2a03:2880:f068::,
                             2a03:2880:f06a::,
                             2a03:2880:f06b::,
                             2a03:2880:f06d::,
                             2a03:2880:f06f::,
                             2a03:2880:f070::,
                             2a03:2880:f071::,
                             2a03:2880:f073::,
                             2a03:2880:f074::,
                             2a03:2880:f076::,
                             2a03:2880:f077::,
                             2a03:2880:f078::,
                             2a03:2880:f07d::,
                             2a03:2880:f07e::,
                             2a03:2880:f080::,
                             2a03:2880:f081::,
                             2a03:2880:f082::,
                             2a03:2880:f083::,
                             2a03:2880:f084::,
                             2a03:2880:f085::,
                             2a03:2880:f086::,
                             2a03:2880:f08a::,
                             2a03:2880:f08e::,
                             2a03:2880:f091::,
                             2a03:2880:f096::,
                             2a03:2880:f097::,
                             2a03:2880:f098::,
                             2a03:2880:f099::,
                             2a03:2880:f09a::,
                             2a03:2880:f09b::,
                             2a03:2880:f09c::,
                             2a03:2880:f09d::,
                             2a03:2880:f09e::,
                             2a03:2880:f0a2::,
                             2a03:2880:f0a3::,
                             2a03:2880:f0a4::,
                             2a03:2880:f0a5::,
                             2a03:2880:f0a6::,
                             2a03:2880:f0a7::,
                             2a03:2880:f0a8::,
                             2a03:2880:f0aa::,
                             2a03:2880:f0fc::,
                             2a03:2880:f0fd::,
                             2a03:2880:f0ff::,
                             2a03:2880:f101::,
                             2a03:2880:f102::,
                             2a03:2880:f103::,
                             2a03:2880:f104::,
                             2a03:2880:f105::,
                             2a03:2880:f106::,
                             2a03:2880:f107::,
                             2a03:2880:f108::,
                             2a03:2880:f10a::,
                             2a03:2880:f10c::,
                             2a03:2880:f10d::,
                             2a03:2880:f10e::,
                             2a03:2880:f10f::,
                             2a03:2880:f110::,
                             2a03:2880:f111::,
                             2a03:2880:f112::,
                             2a03:2880:f113::,
                             2a03:2880:f114::,
                             2a03:2880:f115::,
                             2a03:2880:f116::,
                             2a03:2880:f117::,
                             2a03:2880:f119::,
                             2a03:2880:f11b::,
                             2a03:2880:f11c::,
                             2a03:2880:f11f::,
                             2a03:2880:f121::,
                             2a03:2880:f123::,
                             2a03:2880:f124::,
                             2a03:2880:f127::,
                             2a03:2880:f128::,
                             2a03:2880:f129::,
                             2a03:2880:f12a::,
                             2a03:2880:f12b::,
                             2a03:2880:f12c::,
                             2a03:2880:f12d::,
                             2a03:2880:f12e::,
                             2a03:2880:f12f::,
                             2a03:2880:f130::,
                             2a03:2880:f131::,
                             2a03:2880:f132::,
                             2a03:2880:f133::,
                             2a03:2880:f134::,
                             2a03:2880:f135::,
                             2a03:2880:f136::,
                             2a03:2880:f137::,
                             2a03:2880:f138::,
                             2a03:2880:f13a::,
                             2a03:2880:f13b::,
                             2a03:2880:f13d::,
                             2a03:2880:f13e::,
                             2a03:2880:f13f::,
                             2a03:2880:f140::,
                             2a03:2880:f141::,
                             2a03:2880:f142::,
                             2a03:2880:f143::,
                             2a03:2880:f144::,
                             2a03:2880:f145::,
                             2a03:2880:f146::,
                             2a03:2880:f147::,
                             2a03:2880:f148::,
                             2a03:2880:f14a::,
                             2a03:2880:f14b::,
                             2a03:2880:f14c::,
                             2a03:2880:f14d::,
                             2a03:2880:f14e::,
                             2a03:2880:f14f::,
                             2a03:2880:f150::,
                             2a03:2880:f152::,
                             2a03:2880:f153::,
                             2a03:2880:f154::,
                             2a03:2880:f155::,
                             2a03:2880:f156::,
                             2a03:2880:f157::,
                             2a03:2880:f158::,
                             2a03:2880:f159::,
                             2a03:2880:f15a::,
                             2a03:2880:f15b::,
                             2a03:2880:f15c::,
                             2a03:2880:f15d::,
                             2a03:2880:f15e::,
                             2a03:2880:f160::,
                             2a03:2880:f161::,
                             2a03:2880:f162::,
                             2a03:2880:f163::,
                             2a03:2880:f164::,
                             2a03:2880:f165::,
                             2a03:2880:f166::,
                             2a03:2880:f167::,
                             2a03:2880:f168::,
                             2a03:2880:f169::,
                             2a03:2880:f16a::,
                             2a03:2880:f16b::,
                             2a03:2880:f16c::,
                             2a03:2880:f16d::,
                             2a03:2880:f16e::,
                             2a03:2880:f16f::,
                             2a03:2880:f170::,
                             2a03:2880:f171::,
                             2a03:2880:f172::,
                             2a03:2880:f173::,
                             2a03:2880:f174::,
                             2a03:2880:f175::,
                             2a03:2880:f176::,
                             2a03:2880:f177::,
                             2a03:2880:f178::,
                             2a03:2880:f179::,
                             2a03:2880:f17a::,
                             2a03:2880:f17b::,
                             2a03:2880:f17c::,
                             2a03:2880:f17d::,
                             2a03:2880:f17e::,
                             2a03:2880:f17f::,
                             2a03:2880:f180::,
                             2a03:2880:f181::,
                             2a03:2880:f182::,
                             2a03:2880:f183::,
                             2a03:2880:f184::,
                             2a03:2880:f185::,
                             2a03:2880:f186::,
                             2a03:2880:f187::,
                             2a03:2880:f188::,
                             2a03:2880:f189::,
                             2a03:2880:f18a::,
                             2a03:2880:f18b::,
                             2a03:2880:f18c::,
                             2a03:2880:f1fc::,
                             2a03:2880:f1fd::,
                             2a03:2880:f1ff::,
                             2a03:2880:f201::,
                             2a03:2880:f202::,
                             2a03:2880:f203::,
                             2a03:2880:f204::,
                             2a03:2880:f205::,
                             2a03:2880:f206::,
                             2a03:2880:f207::,
                             2a03:2880:f208::,
                             2a03:2880:f20a::,
                             2a03:2880:f20c::,
                             2a03:2880:f20d::,
                             2a03:2880:f20e::,
                             2a03:2880:f20f::,
                             2a03:2880:f210::,
                             2a03:2880:f211::,
                             2a03:2880:f212::,
                             2a03:2880:f213::,
                             2a03:2880:f214::,
                             2a03:2880:f215::,
                             2a03:2880:f216::,
                             2a03:2880:f217::,
                             2a03:2880:f219::,
                             2a03:2880:f21b::,
                             2a03:2880:f21c::,
                             2a03:2880:f21f::,
                             2a03:2880:f221::,
                             2a03:2880:f223::,
                             2a03:2880:f224::,
                             2a03:2880:f227::,
                             2a03:2880:f228::,
                             2a03:2880:f229::,
                             2a03:2880:f22a::,
                             2a03:2880:f22b::,
                             2a03:2880:f22c::,
                             2a03:2880:f22d::,
                             2a03:2880:f22e::,
                             2a03:2880:f22f::,
                             2a03:2880:f230::,
                             2a03:2880:f231::,
                             2a03:2880:f232::,
                             2a03:2880:f233::,
                             2a03:2880:f234::,
                             2a03:2880:f235::,
                             2a03:2880:f236::,
                             2a03:2880:f237::,
                             2a03:2880:f238::,
                             2a03:2880:f23a::,
                             2a03:2880:f23b::,
                             2a03:2880:f23d::,
                             2a03:2880:f23e::,
                             2a03:2880:f23f::,
                             2a03:2880:f240::,
                             2a03:2880:f241::,
                             2a03:2880:f242::,
                             2a03:2880:f243::,
                             2a03:2880:f244::,
                             2a03:2880:f245::,
                             2a03:2880:f246::,
                             2a03:2880:f247::,
                             2a03:2880:f248::,
                             2a03:2880:f24a::,
                             2a03:2880:f24b::,
                             2a03:2880:f24c::,
                             2a03:2880:f24d::,
                             2a03:2880:f24e::,
                             2a03:2880:f24f::,
                             2a03:2880:f250::,
                             2a03:2880:f252::,
                             2a03:2880:f253::,
                             2a03:2880:f254::,
                             2a03:2880:f255::,
                             2a03:2880:f256::,
                             2a03:2880:f257::,
                             2a03:2880:f258::,
                             2a03:2880:f259::,
                             2a03:2880:f25a::,
                             2a03:2880:f25b::,
                             2a03:2880:f25c::,
                             2a03:2880:f25d::,
                             2a03:2880:f25e::,
                             2a03:2880:f260::,
                             2a03:2880:f261::,
                             2a03:2880:f262::,
                             2a03:2880:f263::,
                             2a03:2880:f264::,
                             2a03:2880:f265::,
                             2a03:2880:f266::,
                             2a03:2880:f267::,
                             2a03:2880:f268::,
                             2a03:2880:f269::,
                             2a03:2880:f26a::,
                             2a03:2880:f26b::,
                             2a03:2880:f26c::,
                             2a03:2880:f26d::,
                             2a03:2880:f26e::,
                             2a03:2880:f26f::,
                             2a03:2880:f270::,
                             2a03:2880:f271::,
                             2a03:2880:f272::,
                             2a03:2880:f273::,
                             2a03:2880:f274::,
                             2a03:2880:f275::,
                             2a03:2880:f276::,
                             2a03:2880:f277::,
                             2a03:2880:f278::,
                             2a03:2880:f279::,
                             2a03:2880:f27a::,
                             2a03:2880:f27b::,
                             2a03:2880:f27c::,
                             2a03:2880:f27d::,
                             2a03:2880:f27e::,
                             2a03:2880:f27f::,
                             2a03:2880:f280::,
                             2a03:2880:f281::,
                             2a03:2880:f282::,
                             2a03:2880:f283::,
                             2a03:2880:f284::,
                             2a03:2880:f285::,
                             2a03:2880:f286::,
                             2a03:2880:f287::,
                             2a03:2880:f288::,
                             2a03:2880:f289::,
                             2a03:2880:f28a::,
                             2a03:2880:f28b::,
                             2a03:2880:f28c::,
                             2a03:2880:f2ff::,
                             2a03:2880:f300::,
                             2a03:2880:f301::,
                             2a03:2880:f302::,
                             2a03:2880:f303::,
                             2a03:2880:f304::,
                             2a03:2880:f305::,
                             2a03:2880:f306::,
                             2a03:2880:f307::,
                             2a03:2880:f308::,
                             2a03:2880:f309::,
                             2a03:2880:f30a::,
                             2a03:2880:f30b::,
                             2a03:2880:f30c::,
                             2a03:2880:f30d::,
                             2a03:2880:f30e::,
                             2a03:2880:f30f::,
                             2a03:2880:f310::,
                             2a03:2880:f311::,
                             2a03:2880:f312::,
                             2a03:2880:f313::,
                             2a03:2880:f314::,
                             2a03:2880:f315::,
                             2a03:2880:f316::,
                             2a03:2880:f317::,
                             2a03:2880:f318::,
                             2a03:2880:f319::,
                             2a03:2880:f31a::,
                             2a03:2880:f31b::,
                             2a03:2880:f31c::,
                             2a03:2880:f31d::,
                             2a03:2880:f31e::,
                             2a03:2880:f31f::,
                             2a03:2880:f320::,
                             2a03:2880:f321::,
                             2a03:2880:f322::,
                             2a03:2880:f323::,
                             2a03:2880:f324::,
                             2a03:2880:f325::,
                             2a03:2880:f326::,
                             2a03:2880:f327::,
                             2a03:2880:f328::,
                             2a03:2880:f329::,
                             2a03:2880:f32a::,
                             2a03:2880:f32b::,
                             2a03:2880:f32c::,
                             2a03:2880:f32d::,
                             2a03:2880:f32e::,
                             2a03:2880:f32f::,
                             2a03:2880:f330::,
                             2a03:2880:f331::,
                             2a03:2880:f332::,
                             2a03:2880:f333::,
                             2a03:2880:f334::,
                             2a03:2880:f335::,
                             2a03:2880:f336::,
                             2a03:2880:f337::,
                             2a03:2880:f338::,
                             2a03:2880:f339::,
                             2a03:2880:f33a::,
                             2a03:2880:f33b::,
                             2a03:2880:f33c::,
                             2a03:2880:f33d::,
                             2a03:2880:ff08::,
                             2a03:2880:ff09::,
                             2a03:2880:ff0a::,
                             2a03:2880:ff0b::,
                             2a03:2880:ff0c::,
                             2a03:2880:fffe::,
                             2a03:2880:ffff::,
                             2a03:2881::,
                             2a03:2881:1::,
                             2a03:2881:2::,
                             2a03:2881:3::,
                             2a03:2881:4::,
                             2a03:2881:5::,
                             2a03:2881:6::,
                             2a03:2881:7::,
                             2a03:2881:8::,
                             2a03:2881:9::,
                             2a03:2881:a::,
                             2a03:2881:b::,
                             2a03:2881:c::,
                             2a03:2881:d::,
                             2a03:2881:e::,
                             2a03:2881:f::,
                             2a03:2881:10::,
                             2a03:2881:11::,
                             2a03:2881:12::,
                             2a03:2881:13::,
                             2a03:2881:14::,
                             2a03:2881:15::,
                             2a03:2881:16::,
                             2a03:2881:17::,
                             2a03:2881:18::,
                             2a03:2881:19::,
                             2a03:2881:1a::,
                             2a03:2881:1b::,
                             2a03:2881:1c::,
                             2a03:2881:1e::,
                             2a03:2881:48::,
                             2a03:2881:98::,
                             2a03:2881:4000::,
                             2a03:2881:4001::,
                             2a03:2881:4002::,
                             2a03:2881:4003::,
                             2a03:2881:4004::,
                             2a03:2881:4005::,
                             2a03:2881:4006::,
                             2a03:2881:4007::,
                             2a03:2881:4008::,
                             2a03:2881:4009::,
                             2a03:2881:400a::,
                             2a03:2881:400b::,
                             2a03:2881:400c::,
                             2a03:2881:400d::,
                             2a03:2887:ff02::,
                             2a03:2887:ff03::,
                             2a03:2887:ff04::,
                             2a03:2887:ff18::,
                             2a03:2887:ff19::,
                             2a03:2887:ff1b::,
                             2a03:2887:ff1c::,
                             2a03:2887:ff1d::,
                             2a03:2887:ff1e::,
                             2a03:2887:ff1f::,
                             2a03:2887:ff21::,
                             2a03:2887:ff23::,
                             2a03:2887:ff24::,
                             2a03:2887:ff25::,
                             2a03:2887:ff27::,
                             2a03:2887:ff28::,
                             2a03:2887:ff29::,
                             2a03:2887:ff2a::,
                             2a03:2887:ff2b::,
                             2a03:2887:ff2c::,
                             2a03:2887:ff2d::,
                             2a03:2887:ff2e::,
                             2a03:2887:ff2f::,
                             2a03:2887:ff30::,
                             2a03:2887:ff33::,
                             2a03:2887:ff35::,
                             2a03:2887:ff36::,
                             2a03:2887:ff37::,
                             2a03:2887:ff38::,
                             2a03:2887:ff39::,
                             2a03:2887:ff3a::,
                             2a03:2887:ff3b::,
                             2a03:2887:ff3f::,
                             2a03:2887:ff40::,
                             2a03:2887:ff41::,
                             2a03:2887:ff42::,
                             2a03:2887:ff43::,
                             2a03:2887:ff44::,
                             2a03:2887:ff45::,
                             2a03:2887:ff48::,
                             2a03:2887:ff49::,
                             2a03:2887:ff4a::,
                             2a03:2887:ff4b::,
                             2a03:2887:ff4d::,
                             2a03:2887:ff4e::,
                             2a03:2887:ff4f::,
                             2a03:2887:ff50::,
                             2a03:2887:ff51::,
                             2a03:2887:ff52::,
                             2a03:2887:ff53::,
                             2a03:2887:ff54::,
                             2a03:2887:ff55::,
                             2a03:2887:ff56::,
                             2a03:2887:ff57::,
                             2a03:2887:ff58::,
                             2a03:2887:ff59::,
                             2a03:2887:ff60::,
                             2a03:2887:ff61::,
                             2a03:2887:ff62::,
                             2a03:2887:ff63::,
                             2a03:83e0::,
                             2a10:f781:10:cee0::,
                             2c0f:ef78::,
                             2c0f:ef78:1::,
                             2c0f:ef78:3::,
                             2c0f:ef78:5::,
                             2c0f:ef78:6::,
                             2c0f:ef78:9::,
                             2c0f:ef78:c::,
                             2c0f:ef78:d::,
                             2c0f:ef78:e::,
                             2c0f:ef78:f::,
                             2c0f:ef78:10::,
                             2c0f:ef78:11::,
                             2c0f:ef78:12:: }
        }
        set Debug {
                type ipv4_addr
                flags timeout
                comment "Zum testen"
                elements = { 192.168.40.1 }
        }
}

/ # nft list chain inet fw4 forward
table inet fw4 {
        chain forward {
                type filter hook forward priority filter; policy drop;
                ct state vmap { established : accept, related : accept } comment "!fw4: Handle forwarded flows"
                iifname { "br-lan", "phy0-ap0" } jump forward_lan comment "!fw4: Handle lan IPv4/IPv6 forward traffic"
                iifname "eth1" jump forward_wan comment "!fw4: Handle wan IPv4/IPv6 forward traffic"
        }
}

/ # nft list chain inet fw4 forward_lan
table inet fw4 {
        chain forward_lan {
                ip daddr @Facebook-IPv4Set counter packets 0 bytes 0 jump reject_to_wan comment "!fw4: Facebook-BlockIPv4Set"
                meta l4proto tcp ip daddr @Debug counter packets 7 bytes 420 jump reject_to_wan comment "!fw4: DebugIPSets"
                meta l4proto udp ip daddr @Debug counter packets 0 bytes 0 jump reject_to_wan comment "!fw4: DebugIPSets"
                tcp dport 80 counter packets 4 bytes 240 jump accept_to_wan comment "!fw4: http"
                tcp dport 443 counter packets 1026 bytes 61552 jump accept_to_wan comment "!fw4: https"
                tcp dport { 25, 465, 993, 4190 } counter packets 20 bytes 1200 jump accept_to_wan comment "!fw4: smtps, imap"
                tcp dport { 22, 7777 } counter packets 7 bytes 420 jump accept_to_wan comment "!fw4: ssh"
                udp dport 123 counter packets 0 bytes 0 jump accept_to_wan comment "!fw4: ntp"
                udp dport 1194 counter packets 0 bytes 0 jump accept_to_wan comment "!fw4: openVPN"
                udp dport 51820 counter packets 0 bytes 0 jump accept_to_wan comment "!fw4: wireguard"
                tcp dport 5222 counter packets 0 bytes 0 jump accept_to_wan comment "!fw4: xmpp"
                tcp dport 11371 counter packets 0 bytes 0 jump accept_to_wan comment "!fw4: openPGP Schlüsselserver"
                counter packets 1405 bytes 1306828 jump drop_to_wan comment "!fw4: Blocke alles"
                jump accept_to_wan comment "!fw4: Accept lan to wan forwarding"
                jump accept_to_lan
        }
}
21

Your IPv4 rule has no hits, and you don’t yet have a separate IPv6 rule created.

Try pinging the Facebook IP again, and then print the forward_lan chain again to see if the rule counter increments. If not, check there is no VPN on the machine used for the testing.