wok annotate ipset/description.txt @ rev 25037
Up glza (0.11.4)
| author | Pascal Bellard <pascal.bellard@slitaz.org> |
|---|---|
| date | Sat May 21 21:38:29 2022 +0000 (24 months ago) |
| parents | |
| children |
| rev | line source |
|---|---|
| Hans-G?nter@24672 | 1 IP sets are a framework inside the Linux kernel, which can be administered |
| Hans-G?nter@24672 | 2 by the ipset utility. Depending on the type, an IP set may store IP addresses, |
| Hans-G?nter@24672 | 3 networks, (TCP/UDP) port numbers, MAC addresses, interface names or |
| Hans-G?nter@24672 | 4 combinations of them in a way, which ensures lightning speed when matching |
| Hans-G?nter@24672 | 5 an entry against a set. |
| Hans-G?nter@24672 | 6 |
| Hans-G?nter@24672 | 7 If you want to |
| Hans-G?nter@24672 | 8 |
| Hans-G?nter@24672 | 9 * store multiple IP addresses or port numbers and match against the |
| Hans-G?nter@24672 | 10 collection by iptables at one swoop; |
| Hans-G?nter@24672 | 11 * dynamically update iptables rules against IP addresses or ports without |
| Hans-G?nter@24672 | 12 performance penalty; |
| Hans-G?nter@24672 | 13 * express complex IP address and ports based rulesets with one single |
| Hans-G?nter@24672 | 14 iptables rule and benefit from the speed of IP sets |
| Hans-G?nter@24672 | 15 |
| Hans-G?nter@24672 | 16 then ipset may be the proper tool for you. |