#!/usr/bin/env bash

set -x

iptables -t mangle -L PREROUTING |grep bypasspool
if [ "$?" -ne "0" ];then
        iptables -t mangle -I PREROUTING -m set --match-set bypasspool dst,src -j DIVERT
fi

ipset create bypasspool hash:ip
while read item; do
        echo $item
        host -4 $item |grep "has address"|awk '{print $4}' |xargs -l1 ipset add bypasspool
done < domains-to-bypass.txt
set +x