ipset allows administration of sets of IP addresses/networks, ports, MAC addresses, and interfaces, which are stored in hash or bitmap data structures. These can then be used in conjunction with iptables to do fast presence lookups.
|Tags||Internet Security Networking Firewalls|
Release Notes: This release adds per-element byte and packet counters for every set type.
Release Notes: This release fixes timeout value corruption on "set resize" and incorrect error messages during syntax errors.
Release Notes: In this release, using protocol numbers is supported alongside their names. The number of maximum ipsets is now automatically increased as needed.
Release Notes: This release fixes the internal CIDR bookkeeping which could lead to mismatches when the number of different-sized networks was greater than the smallest CIDR value. It supports matching elements marked with "nomatch" in "hash:*net*" sets and adds /0 network support to the "hash:net,iface" type.