Should use ipset #1

Open
opened 2026-02-12 23:40:30 +00:00 by mikael-lovqvist · 1 comment

Something like

ipset create badguys hash:ip
ipset add badguys 177.87.116.5
...
iptables-nft -A INPUT -m set --match-set badguys src -j DROP

allows it to be a single rule, then we just call on ipset.

Something like ```sh ipset create badguys hash:ip ipset add badguys 177.87.116.5 ... iptables-nft -A INPUT -m set --match-set badguys src -j DROP ``` allows it to be a single rule, then we just call on ipset.
Author
Owner

One can also use timeouts with sets:

ipset create badguys hash:ip timeout 3600
One can also use timeouts with sets: ```sh ipset create badguys hash:ip timeout 3600 ```
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mikael-lovqvist/rudimentary-ids#1