search for: ipv6_bogon

...my iptables/ipset setups to nftables. Some of these setups involve fairly large sets and updating those atomically does not seem to be practical due to the excessive amount of time it takes to reload the set via a script file. Assume a set that was initialized like this: nft add set inet filter ipv6_bogons { type ipv6_addr; flags interval; } And then load the attached example ipv6_bogons.nft with `nft -f' to populate the set with elements. When you first load that file, it's a matter of seconds (or less). But if you try to load the set another time in order to reload it (the script contains...