Access Lists: support dynamic/remote IP sources (like Firewall alias URL tables)

[dinguz]

In Firewall > Aliases you can create a "URL Table (IPs)" alias that periodically re-fetches its contents from a remote source (e.g. Cloudflare's official IP ranges), so the alias stays current without manual maintenance.

The Caddy plugin's Access Lists (Services > Caddy > Access) only support static, manually entered CIDR blocks. For something like a Cloudflare IP list, this means every range change on Cloudflare's end has to be applied by hand, otherwise the list silently drifts out of sync.

Would it be possible to either:

• let an Access List reference an existing Firewall alias, or
• give Access Lists their own periodic remote-fetch option, similar to URL Table aliases

so lists like this stay in sync automatically instead of requiring manual upkeep?

[Monviech (Cedrik)]

Discussed it here a while ago and not planning to do it.

https://github.com/opnsense/plugins/issues/5358