Using ipset to bypass a VPN

I'm attempting to use ipset to divert certain URLs around my VPN connection (the "Netflix" problem) with Tomato (Shibby 1.28) on an Asus RT-N66U router. The set of IP addresses I end up collecting looks convincing and marking the IP packets headed to those URLs appears to be working but I find that I am unable to browse to the URLs in the set at all (I can get to all other URLs). Can anyone see what step I've missed?

Dnsmasq custom configuration (with _ replacing . to...

Using ipset to bypass a VPN