AdguardTeam / AdguardTeam/CoreLibs

Support for Blocking IP Addresses / IP Address Ranges via Filter Subscription

未关闭
#2,097 2 条评论 1 个 reaction 已指派 1 人 已指派给 @vozersky 在 GitHub 查看
Feature request Priority: P4
主要语言
没有语言数据
星标
52
派生
10
PR 合并指标
30 天内没有已合并 PR

描述

### Issue Details

Currently, AdGuard for Windows does not support blocking specific IP addresses or IP ranges. This limits its ability to fully prevent connections to malicious or unwanted servers, especially when apps or malware bypass DNS filtering by connecting directly to IPs.

### Proposed solution

Adding IP-based blocking would enhance security by:

- Preventing communication with known malicious IPs (e.g., C2 servers, phishing hosts).
- Supporting integration with trusted IP blocklists (e.g., AbuseIPDB, FireHOL, Spamhaus).
- Allowing users to block geographic IP ranges for privacy, security, or parental control.
- Reducing reliance on other security tools by blocking threats earlier.
- Stopping apps that bypass DNS-level filtering by using hardcoded IPs.

User should be able to add a filter subscription just like the usual filters in AG to block the list of IP Addresses / IP Address Ranges.

[IP Address Blocklist](https://raw.githubusercontent.com/romainmarcoux/malicious-ip/main/full-aa.txt)
[IP Address Range](https://raw.githubusercontent.com/antonme/ipranges/refs/heads/main/apple/ipv4_merged.txt)

### Alternative solution

Use the built-in firewall or a third-party program to block IP Addresses.

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。