Identifying clients by ipset

### Prerequisites

- [X] I have checked the [Wiki](https://github.com/AdguardTeam/AdGuardHome/wiki) and [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions) and found no answer

- [X] I have searched other issues and found no duplicates

- [X] I want to request a feature or enhancement and not ask a question

### The problem

Currently it's difficult to make AGH to interact with other software, and maintaining host lists between different software is also challenging.

Nowadays, encrypted DNS is widely used. For my common usage case, I want to block some clients from connecting to certain services, not only through DNS but also through network connections.

This usually requires interaction with a firewall. I utilized domain ipset function, along with additional IP sets, to easily get destination IPs that need be blocked. However, I need to add the source IP from both sides, making it hard to maintain.

Vice versa, this also works for whitelisting case.

### Proposed solution

It would be great if AGH could add support to identifying clients by ipset. And we could integrate ADG with firewall.

### Alternatives considered and additional information

Any advice would be appreciated.