IP-based Rule

There are 2 IP-based rule types. For a request whose hostname is a domain, IP-based rules are skipped on the first matching pass; if no other rule matches, Chute resolves the domain with DNS and evaluates the rules again with the resolved IP address. If the DNS lookup fails, IP-based rules simply never match and the FINAL rule applies.

IP-CIDR

IP-CIDR,192.168.0.0/16,DIRECT
IP-CIDR,10.0.0.0/8,DIRECT
IP-CIDR,172.16.0.0/12,DIRECT
IP-CIDR,127.0.0.1/8,DIRECT

Rule matches if the IP address of the request matches a specified range.

GEOIP

GEOIP,US,DIRECT

Rule matches if the GeoIP test result matches a specified country code.

IP-based Rule Option

Option: no-resolve

GEOIP,US,DIRECT,no-resolve
IP-CIDR,172.16.0.0/12,DIRECT,no-resolve

With the 'no-resolve' option, the rule stays skipped on the second (post-DNS) matching pass as well, so it only ever matches requests that already carry an IP address.

Notice: Because of the two-pass evaluation, for a request with a domain hostname a later non-IP rule can match before an earlier IP-based rule. If DNS resolution fails, IP-based rules never match and the FINAL rule applies; rule evaluation is not aborted.