SMEServer Ipset: Difference between revisions

From Realm Data Systems
Jump to navigationJump to search
Created page with "Copied from https://wiki.koozali.org/Ipset (280626) {{Languages}} <!-- here we define the contrib name variable --> <!-- we get the page title, remove suffix for translated version; if needed you can define there with the value you want--> {{#vardefine:contribname| {{lc: {{#titleparts: {{BASEPAGENAME}} |1}} }} }} {{#vardefine:smecontribname| smeserver-{{lc: {{#titleparts: {{BASEPAGENAME}} |1}} }} }} <!-- we define the language --> {{#vardefine:lang| {{lc: {{#titlep..."
 
 
(One intermediate revision by the same user not shown)
Line 35: Line 35:
=== Installation ===
=== Installation ===
<tabs container="" style="display: inline-block;"><tab name="For SME 11">
<tabs container="" style="display: inline-block;"><tab name="For SME 11">
  dnf install {{#var:smecontribname}}
  dnf install smeserver-ipset
</tab></tabs>
</tab></tabs>


Line 41: Line 41:
for the moment you can only edit the templates as custom templates to modify the config
for the moment you can only edit the templates as custom templates to modify the config
=== Uninstall ===
=== Uninstall ===
  yum remove {{#var:smecontribname}} {{#var:contribname}}
  yum remove smeserver-ipset ipset


=== Bugs ===
=== Bugs ===

Latest revision as of 06:10, 28 June 2026

Copied from https://wiki.koozali.org/Ipset (280626)

Template:Languages {{#vardefine:contribname| {{#titleparts: smeserver ipset |1}} }} {{#vardefine:smecontribname| smeserver-{{#titleparts: smeserver ipset |1}} }} {{#vardefine:lang| {{#titleparts: smeserver ipset | | -1}} |en }} Template:Infobox contribs

Version

{{#smeversion: {{#var:smecontribname}} }}

Description

A Bash shell script which uses ipset and iptables to ban a large number of IP addresses published in IP blacklists. ipset uses a hashtable to store/fetch IP addresses and thus the IP lookup is a lot (!) faster than thousands of sequentially parsed iptables ban rules.

If will place the block list in your INPUT table before xt_geoip and fail2ban. If you also use crowdsec, this one will always take the first rank in the table.

See initial work of Stefano here : https://forums.koozali.org/index.php/topic,55193.msg291088.html#msg291088

Installation

<tabs container="" style="display: inline-block;"><tab name="For SME 11">

dnf install smeserver-ipset

</tab></tabs>

Configuration

for the moment you can only edit the templates as custom templates to modify the config

Uninstall

yum remove smeserver-ipset  ipset

Bugs

Please raise bugs under the SME-Contribs section in Template:BugzillaFileBug and select the {{#var:smecontribname}} component or use Template:BugzillaFileBug

Below is an overview of the current issues for this contrib:{{#bugzilla:columns=id,product,version,status,summary|sort=id|order=desc|component={{#var:smecontribname}} |noresultsmessage=No open bugs found.}}

Changelog

Only released version in smecontrib are listed here.

{{ #smechangelog: {{#var:smecontribname}} }}