wok-current diff ipset/description.txt @ rev 24745
updated libfm packages (1.3.1 -> 1.3.2)
author | Hans-G?nter Theisgen |
---|---|
date | Wed Mar 16 11:17:07 2022 +0100 (2022-03-16) |
parents | |
children |
line diff
1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/ipset/description.txt Wed Mar 16 11:17:07 2022 +0100 1.3 @@ -0,0 +1,16 @@ 1.4 +IP sets are a framework inside the Linux kernel, which can be administered 1.5 +by the ipset utility. Depending on the type, an IP set may store IP addresses, 1.6 +networks, (TCP/UDP) port numbers, MAC addresses, interface names or 1.7 +combinations of them in a way, which ensures lightning speed when matching 1.8 +an entry against a set. 1.9 + 1.10 +If you want to 1.11 + 1.12 +* store multiple IP addresses or port numbers and match against the 1.13 + collection by iptables at one swoop; 1.14 +* dynamically update iptables rules against IP addresses or ports without 1.15 + performance penalty; 1.16 +* express complex IP address and ports based rulesets with one single 1.17 + iptables rule and benefit from the speed of IP sets 1.18 + 1.19 +then ipset may be the proper tool for you.