AdguardTeam / AdguardTeam/CoreLibs

Support for Blocking IP Addresses / IP Address Ranges via Filter Subscription

Open
#2,097 2 comments 1 reaction 1 assignee Assigned to @vozersky View on GitHub
Feature request Priority: P4
Dominant language
No language data
Stars
52
Forks
10
PR merge metrics
No merged PRs in 30d

Description

### Issue Details

Currently, AdGuard for Windows does not support blocking specific IP addresses or IP ranges. This limits its ability to fully prevent connections to malicious or unwanted servers, especially when apps or malware bypass DNS filtering by connecting directly to IPs.

### Proposed solution

Adding IP-based blocking would enhance security by:

- Preventing communication with known malicious IPs (e.g., C2 servers, phishing hosts).
- Supporting integration with trusted IP blocklists (e.g., AbuseIPDB, FireHOL, Spamhaus).
- Allowing users to block geographic IP ranges for privacy, security, or parental control.
- Reducing reliance on other security tools by blocking threats earlier.
- Stopping apps that bypass DNS-level filtering by using hardcoded IPs.

User should be able to add a filter subscription just like the usual filters in AG to block the list of IP Addresses / IP Address Ranges.

[IP Address Blocklist](https://raw.githubusercontent.com/romainmarcoux/malicious-ip/main/full-aa.txt)
[IP Address Range](https://raw.githubusercontent.com/antonme/ipranges/refs/heads/main/apple/ipv4_merged.txt)

### Alternative solution

Use the built-in firewall or a third-party program to block IP Addresses.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.