Add support for IP-to-IP rules to cloaking

[legovo]

As I understand it, cloaking currently only works for domains (like example.com -> 1.2.3.4 or example.com -> example.net)

It would be great if it could also redirect IPs, as in these example rules:
1.1.1.1 1.2.3.4
172.64.0.0/13 1.2.3.4

How it should work: after resolving a domain, if the resulting specific IP/range matches a cloaking rule, it gets replaced

Why: this would allow entire IP ranges to be blocked or redirected (like ad/tracker networks or specific server networks) regardless of domain names. Useful for network management and bypassing certain blocks

[jedisct1]

This is not possible with DNS.

What you are asking for is a firewall configuration, on your router or operating system.

[legovo]

Are you sure? Unlike the hosts file, the idea is that we only replace the IP address after it has been resolved
If the resolved IP address matches a specific range, we simply replace it with another, as we would with domain-to-domain redirection
Please correct me if I'm wrong and that's totally impossible!