search for: iphash

...g/ipset.man.html hasn't been updated since October 2008, which seems to correspond with ipset 2.4. As such, it seems to be missing changes and features for all versions since, up to and including 6.0. A few examples of missing documentation include the format for creating IPv6 sets (-6), that iphash and hash:ip are the same, or that iphash also supports timeouts. (All notes gathered from reviewing the included tests.) Please include all currently available features and options. Thanks! -- Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email ------- You are receiving t...

...e number of entries; in some cases I've seen it with under 700 entries but typically it takes over 1,000 entries. I've seen one, two, even three or four entries evicted on a deletion. To reproduce the problem, do one of two things. You can use the data in the ipset tests directory (tests/iphash.t.large), or you can generate a fresh sequence. In the first case, do: ipset restore < tests/iphash.t.large In the second case, do: ipset create test hash:ip len=1024; for ((x=0; x <= len; ++x)); do ipset add test 1.$((x >> 8)).$((x & 255)).1; done Then, to reproduce the...

...Severity: major Priority: P5 Component: default AssignedTo: netfilter-buglog at lists.netfilter.org ReportedBy: peter at cdmon.com Estimated Hours: 0.0 seting timeout to 2147484 or more lists timeout of 4294964. Any timeout below 2147484 works well with iphash set type. We use debian 6 with backports kernel (3.2.41-2~bpo60+1 x86_64) and ipset v6.19, protocol version: 6 -- Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

...the SAVE_IPSETS=Yes feature just be sure to "shorewall save" after altering the blacklist ipset(s). Example /etc/shorewall/blacklist: #ADDRESS/SUBNET PROTOCOL PORT +Blacklist[2] +Blacklistnets[2] Create the blacklist ipsets using: ipset -N Blacklist iphash ipset -N Blacklistnets nethash Add entries ipset -A Blacklist 206.124.146.177 ipset -A Blacklistnets 206.124.146.0/24 To allow entries for individual ports ipset -N SMTP portmap --from 1 --to 31 ipset -A SMTP 25 ipset -A Blacklist 206.124.146.177...

...9;start'', ''restart'' and ''restore'' processing, Shorewall will then attempt to create an ipset named <zone>_<interface> for each zone/interface pair that has been specified as dynamic. The type of ipset created is ''iphash'' so that only individual IPv4 addresses may be added to the set. c) Execute the following commands during ''shorewall stop'' or ''shorewall-lite stop'': if ipset -S > ${VARDIR}/ipsets.tmp; then mv -f ${VARDIR}/...

...et ++ local modulename=ip_set ++ local modulefile ++ local suffix ++ moduleloader=modprobe ++ qt which modprobe ++ which modprobe +++ lsmod +++ grep ip_set ++ ''['' -z ''ip_set_portmap 5248 0 ip_set_macipmap 5124 0 ip_set_ipmap 4864 0 ip_set_iphash 7428 0 ip_set 23068 8 ip_set_portmap,ip_set_macipmap,ip_set_ipmap,ip_set_iphash'' '']'' ++ loadmodule ip_set_iphash ++ local modulename=ip_set_iphash ++ local modulefile ++ local suffix ++ moduleloader=modprobe ++ qt which modprobe ++ which modpr...