pfsense ipset

[zorrox]

Does pfsense have ipset(dnsmasq) feature or an equivalent?

I am trying to whitelist a domain name on pfsense similar to using ipset to whitelist a domain using iptables. I want to allow domain like whatsapp and telegeram only for certain users.

[viktor_g]

@zorrox see https://docs.netgate.com/pfsense/en/latest/firewall/aliases.html#using-hostnames-in-aliases

[johnpoz]

While I was going to suggest that - its not really the same thing as ipset. But ipset ties in with iptables, and pfsense doesn't use iptables - even if has dnsmasq..

But yeah its the closest thing.. But what is kind of kewl with ipset, is you can set netflix.com - and then anything.netflix.com would be in the rule. I don't believe, off the top of my head there is anyway to do that with aliases.. You have to be able to resolve the fqdn, or use a list of ip/netblocks..