pfsense ipset
-
Does pfsense have ipset(dnsmasq) feature or an equivalent?
I am trying to whitelist a domain name on pfsense similar to using ipset to whitelist a domain using iptables. I want to allow domain like whatsapp and telegeram only for certain users.
-
@zorrox see https://docs.netgate.com/pfsense/en/latest/firewall/aliases.html#using-hostnames-in-aliases
-
While I was going to suggest that - its not really the same thing as ipset. But ipset ties in with iptables, and pfsense doesn't use iptables - even if has dnsmasq..
But yeah its the closest thing.. But what is kind of kewl with ipset, is you can set netflix.com - and then anything.netflix.com would be in the rule. I don't believe, off the top of my head there is anyway to do that with aliases.. You have to be able to resolve the fqdn, or use a list of ip/netblocks..
