Using firewall remote-group (ip|network list from url) in prerouting chains

I have a list of some government-based ips I route exclusively via tunnel.

However, to do so I require prerouting rule to mark packet, and then ip rule to route it to correct interface.

From what I understand right now it is impossible?

Maybe alternative solution for this kind of problem? (list is updated daily)

As a workaround perhaps you can inject that using ansible?

Maybe, a bit clunky since I don’t use ansible for IaC. I just want a daily updated ip list which i can use in prerouting chain.

Seems like it is limitation of vyos ? meaning i can use the same set in manual nft rule ?

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.