Re: Using ipsets

"Tsaousis, Costa" <[email protected]> Fri, 5 Aug 2016 00:16:46 +0300
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <CANL+VpbH+RWP_qBcZ7vDFYKQKv2=QXbpgM=BGcJDaagJA+bCKQ@mail.gmail.com>
Hi Russel,

You can use update-ipsets if you need to download blocklists, process them
and apply them at your firewall.

In the contrib directory there is also a script called ipset-apply.sh which
can apply an ipset you have on disk, without restarting it the firewall.

Finally, you can apply it yourself, using the ipset command (man ipset for
more help).

Costa



On Thu, Aug 4, 2016 at 3:04 PM, Russel Winder <[email protected]> wrote:

> I am beginning to set up some ipsets and to make use of the blocklists.
> I thought I would start with a local ipset listing the IP addresses
> that perform an SSH login attack on my machine. This seems to work,
> but… I am sure there is a firehol command for updating an ipset – to
> avoid restarting the firewall. It doesn't seem to be listed in the
> firehol help (reset-ipsets is but no update-ipsets). Am I just dreaming
> as I cannot now find the webpage I found the command on.
>
> --
> Russel.
> ============================================================
> =================
> Dr Russel Winder      t: +44 20 7585 2200   voip:
> sip:[email protected]
> 41 Buckmaster Road    m: +44 7770 465 077   xmpp: [email protected]
> London SW11 1EN, UK   w: www.russel.org.uk  skype: russel_winder
> _______________________________________________
> Firehol-support mailing list
> [email protected]
> http://lists.firehol.org/mailman/listinfo/firehol-support
_______________________________________________
Firehol-support mailing list
[email protected]
http://lists.firehol.org/mailman/listinfo/firehol-support