netfilter - IP sets
Depending on the type, an IP set may store IP addresses, networks, (TCP/UDP) port numbers, MAC addresses, interface names or combinations of them in a way, which ensures lightning …
IP sets - netfilter
Magic number in ip_set_nethash.h was mistyped (bug reported by Rob Carlson) ipset can now test IP addresses in nethash type of sets (i.e. addresses in netblocks added to the set)
Man page of IPSET - netfilter
When adding/deleting IP addresses to the set by the SET netfilter target, it will be added/deleted by the most specific prefix which can be found in the set, or by the host prefix value if the set is …
Man page of IPTABLES - netfilter
Iptables and ip6tables are used to set up, maintain, and inspect the tables of IPv4 and IPv6 packet filter rules in the Linux kernel. Several different tables may be defined.
IP sets - netfilter
IP sets can be used via the set match and SET target in iptables rules. In the arguments of the extensions, the tokens src and dst can be used to specify which IP address or port to use from …
IP sets - netfilter
source of ipset: ipset-7.24.tar.bz2 (sha512sum) You can download the source of ipset from git as well: git://git.netfilter.org/ipset.git Please note, the ipset source supports kernels released by …
Man page of iptables-extensions - netfilter
If the set type of the specified set is single dimension (for example ipmap), then the command will match packets for which the source address can be found in the specified set.
IP sets - netfilter
ipset Unordered list of some tips and examples: In order to drop traffic to-from banned networks or IP addresses, use IP sets in the raw table of netfilter. If you ...