Whitelisting Amazon

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
Rhysers
DD-WRT Novice


Joined: 06 Aug 2017
Posts: 6

PostPosted: Sat Sep 23, 2017 1:45    Post subject: Whitelisting Amazon Reply with quote
How do I turn the results of https://ip-ranges.amazonaws.com/ip-ranges.json into a white-list without making a gratuitous number of routing statements?
I'm trying to prevent routing amazon through my VPN. The working statement I have for craigslist looks like this:
Code:
iptables -l FORWARD -d ptables -I FORWARD -d 208.82.237.129 -j DNAT --to-destination $(nvram get wan_iface)

but I really don't want to just make a huge list of those.
Sponsor
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6410
Location: UK, London, just across the river..

PostPosted: Sat Sep 23, 2017 10:34    Post subject: Reply with quote
is it a typo or your rule seems to be with corrupted syntax ??

And yes you'd need many of those if IP's are different or you can use range of IP's (one rule) if IP's are in range...
just an example for range block IP's

iptables -I FORWARD -s 13.32.0.0/15 -j DNAT --to-destination $(nvram get wan_iface)

you have to modify it to your needs ...

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55179 WAP
TP-Link WR1043NDv2 -DD-WRT 55303 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55460 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55460 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55363 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
Rhysers
DD-WRT Novice


Joined: 06 Aug 2017
Posts: 6

PostPosted: Wed Oct 18, 2017 23:04    Post subject: Reply with quote
Thanks for the answer.
That is what is currently in my router and it seems to work. I will update to the correct syntax tho. Thanks again!
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum