jow@openwrt.org writes:

> You can trim down the ipset uci declaration a bit, it is possible to
> specify the direction of the set directly in the "option ipset" param,
> therfore you can get rid of the 2nd -ingress declaration.

Ah, neat. Is there an easy way to programmatically insert these rules
when the bcp38 logic is activated? Or is the easiest way to create the
iptables rules manually from the external script (which is run by an
include statement in the firewall rules)?

-Toke