SMEServer Ipset

Copied from https://wiki.koozali.org/Ipset (280626)

Template:Languages {{#vardefine:contribname| {{#titleparts: smeserver ipset |1}} }} {{#vardefine:smecontribname| smeserver-{{#titleparts: smeserver ipset |1}} }} {{#vardefine:lang| {{#titleparts: smeserver ipset | | -1}} |en }} Template:Infobox contribs

Version

{{#smeversion: {{#var:smecontribname}} }}

Description

A Bash shell script which uses ipset and iptables to ban a large number of IP addresses published in IP blacklists. ipset uses a hashtable to store/fetch IP addresses and thus the IP lookup is a lot (!) faster than thousands of sequentially parsed iptables ban rules.

If will place the block list in your INPUT table before xt_geoip and fail2ban. If you also use crowdsec, this one will always take the first rank in the table.

See initial work of Stefano here : https://forums.koozali.org/index.php/topic,55193.msg291088.html#msg291088

Installation

<tabs container="" style="display: inline-block;"><tab name="For SME 11">

dnf install smeserver-ipset

</tab></tabs>

Configuration

for the moment you can only edit the templates as custom templates to modify the config

Uninstall

yum remove smeserver-ipset  ipset

Bugs

Please raise bugs under the SME-Contribs section in Template:BugzillaFileBug and select the {{#var:smecontribname}} component or use Template:BugzillaFileBug

Below is an overview of the current issues for this contrib:{{#bugzilla:columns=id,product,version,status,summary|sort=id|order=desc|component={{#var:smecontribname}} |noresultsmessage=No open bugs found.}}

Changelog

Only released version in smecontrib are listed here.

{{ #smechangelog: {{#var:smecontribname}} }}