ipset?

[mgaulton]

Any chance of a version that users ipset?

[bugi]

Good idea. Ipset has been in the mainline kernel for awhile now hasn't it...

You don't by any chance have an implementation handy, do you? If not, I'll work on it.

[mgaulton]

I don't yet. I just started looking at it myself yesterday :)

On Wed, Sep 24, 2014 at 11:36 PM, bugi [email protected] wrote:

Good idea. Ipset has been in the mainline kernel for awhile now hasn't
it...

You don't by any chance have an implementation handy, do you? If not, I'll
work on it.

—
Reply to this email directly or view it on GitHub
#1 (comment)
.

[mgaulton]

here's my first crack at it, still testing
https://github.com/mgaulton/iptables-by-country

[bugi]

Implemented. You'll need to edit block-countries.conf to enable it.

Thank you for taking first crack at it. Your work did a good job of refreshing my memory of how to work with ipset. It had been quite awhile.

[mgaulton]

thanks. I appreciate the effort

On 9/28/14, bugi [email protected] wrote:

Implemented. You'll need to edit block-countries.conf to enable it.

Thank you for taking first crack at it. Your work did a good job of
refreshing my memory of how to work with ipset. It had been quite awhile.

---

Reply to this email directly or view it on GitHub:
#1 (comment)

[mgaulton]

Just curious, i changed the conf to ipset and its complaining that file is missing.

server5:/opt/firewall-get/iptables-by-country # ./Refresh
75 countries were freshened
clearing iptables of country data
optimizing and loading new country data
/opt/firewall-get/iptables-by-country/block-countries: line 12: /opt/firewall-get/iptables-by-country/block-countries.ipset: No such file or directory
server5:/opt/firewall-get/iptables-by-country # dir
total 500
drwxr-xr-x 8 root root 4096 Sep 28 17:52 .git
-rwxr-xr-x 1 root root 128 Aug 8 16:18 Initialize
-rw-r--r-- 1 root root 1203 Sep 28 17:52 README
-rwxr-xr-x 1 root root 392 Aug 8 16:18 Refresh
-rw-r--r-- 1 root root 457503 Aug 26 08:07 all-zones.tar.gz
-rwxr-xr-x 1 root root 92 Sep 28 17:52 block-countries
-rwxr-xr-x 1 root root 631 Sep 28 17:57 block-countries.conf
-rwxr-xr-x 1 root root 1233 Sep 28 17:52 block-countries.raw
-rwxr-xr-x 1 root root 337 Aug 8 16:18 clear-country-kill-list
-rwxr-xr-x 1 root root 275 Aug 8 16:18 compact_cidr.pl
-rwxr-xr-x 1 root root 676 Aug 8 16:18 freshen
-rwxr-xr-x 1 root root 306 Aug 8 16:18 freshen.droplist
drwxr-xr-x 3 root root 4096 Aug 8 16:24 www.spamhaus.org
drwxr-xr-x 2 root root 4096 Aug 26 08:07 zones
server5:/opt/firewall-get/iptables-by-country # git pull
Already up-to-date.
server5:/opt/firewall-get/iptables-by-country #