ipset allows administration of sets of IP addresses/networks, ports, MAC addresses, and interfaces, which are stored in hash or bitmap data structures. These can then be used in conjunction with iptables to do fast presence lookups.
| Tags | Internet Security Networking Firewalls |
|---|---|
| Licenses | GPL |
| Operating Systems | Linux |
| Implementation | C |
| Translations | English |
Recent releases


Release Notes: This release adds per-element byte and packet counters for every set type.


Release Notes: This release fixes timeout value corruption on "set resize" and incorrect error messages during syntax errors.


Release Notes: In this release, using protocol numbers is supported alongside their names. The number of maximum ipsets is now automatically increased as needed.


Release Notes: This release fixes the internal CIDR bookkeeping which could lead to mismatches when the number of different-sized networks was greater than the smallest CIDR value. It supports matching elements marked with "nomatch" in "hash:*net*" sets and adds /0 network support to the "hash:net,iface" type.