Re: Can Shorewall Help Me? - Thank You!

Tom Eastep
Wed, 25 Aug 2010 15:14:43 -0000

On 8/25/10 7:56 AM, J and T wrote:

>
> Question: is there a way to block IP''s using netfilter/shorewall
with a
> "time-to-live"? That would be an awesome feature if there is one.
I was
> not able to find anything on that at the site. Right now I''m
storing the
> IPs in a text file and then purging from the filter. If there was a ttl
> this would be much easier.

You can use an ''iptree'' ipset which allows a timeout value for
entries
to be specified.

-Tom
--
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________