tl;dr; Can someone compile a copy of tomato-K26USB-1.28.RT-N5x-MIPSR2-110-AIO-64k for me with the CONFIG_NETFILTER_XT_SET kernel module built? I recently switched over the the v109 AIO 64k build and I am so very close to completing my solution for VPN of youtube, netflix, etc. With the new dnsmasq (2.67testC3), there is an "-ipset" flag that puts all resolved IPs from defined domains to go into an ipset (think youtube, netflix). Then using iptables and mangle, you can route specific traffic, matching that ipset over your VPN. This will totally eliminate the need to keep large, unwieldy list of IPs in our WAN UP scripts. Instead the line will look like this: iptables -t mangle -A PREROUTING -i br0 -m set --set VPN_ips -j MARK --set-mark 0 However, "set" functionality for match and target needs to be built in during compile. http://cateee.net/lkddb/web-lkddb/NETFILTER_XT_SET.html I have tried to compile this on my own, but I am getting unusual errors in the during the compile, and I hoped someone would already have a working build space up and running. After a little more searching, I am having the same compiler issue as OP in this thread: http://www.linksysinfo.org/index.php?threads/cant-compile-toastman.68639/ Guess I will try a 32-bit VM for compiling, but if someone has a tested environment up an running, I would appreciate it.