Re: Using ipsets
"Tsaousis, Costa" <[email protected]> Fri, 5 Aug 2016 00:16:46 +0300
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <CANL+VpbH+RWP_qBcZ7vDFYKQKv2=QXbpgM=BGcJDaagJA+bCKQ@mail.gmail.com> |
Hi Russel, You can use update-ipsets if you need to download blocklists, process them and apply them at your firewall. In the contrib directory there is also a script called ipset-apply.sh which can apply an ipset you have on disk, without restarting it the firewall. Finally, you can apply it yourself, using the ipset command (man ipset for more help). Costa On Thu, Aug 4, 2016 at 3:04 PM, Russel Winder <[email protected]> wrote: > I am beginning to set up some ipsets and to make use of the blocklists. > I thought I would start with a local ipset listing the IP addresses > that perform an SSH login attack on my machine. This seems to work, > but… I am sure there is a firehol command for updating an ipset – to > avoid restarting the firewall. It doesn't seem to be listed in the > firehol help (reset-ipsets is but no update-ipsets). Am I just dreaming > as I cannot now find the webpage I found the command on. > > -- > Russel. > ============================================================ > ================= > Dr Russel Winder t: +44 20 7585 2200 voip: > sip:[email protected] > 41 Buckmaster Road m: +44 7770 465 077 xmpp: [email protected] > London SW11 1EN, UK w: www.russel.org.uk skype: russel_winder > _______________________________________________ > Firehol-support mailing list > [email protected] > http://lists.firehol.org/mailman/listinfo/firehol-support _______________________________________________ Firehol-support mailing list [email protected] http://lists.firehol.org/mailman/listinfo/firehol-support