IP sets are a framework inside the Linux kernel since version 2.4.x, which can
be administered by the ipset utility. Depending on the type, currently an IP
set may store IP addresses, (TCP/UDP) port numbers or IP addresses with MAC
addresses in a way, which ensures lightning speed when matching an entry
against a set.
If you want to:
- store multiple IP addresses or port numbers and match against the collection
by iptables at one swoop;
- dynamically update iptables rules against IP addresses or ports without
performance penalty;
- express complex IP address and ports based rulesets with one single iptables
rule and benefit from the speed of IP sets
then ipset may be the proper tool for you.
* Tue Nov 26 2024 Phil Sutter <psutter@redhat.com> - 7.11-11
- Bump release for gated side-tag
* Wed Nov 13 2024 Phil Sutter <psutter@redhat.com> - 7.11-10
- Fix patch "Parse port before trying by service name"
* Thu Jun 20 2024 Phil Sutter <psutter@redhat.com> - 7.11-9
- Fix for wrong comment in ipset-config file
* Wed Mar 15 2023 MSVSphere Packaging Team <packager@msvsphere.ru> - 7.11-8
- Rebuilt for MSVSphere 9.1.
