On 07/30/2018 04:32 AM, Vieri Di Paola via Shorewall-users wrote: > When using the BLACKLIST policy in a policy file (and defining an ipset in > DYNAMIC_BLACKLIST), is it possible to add the src IP address ONLY if it > doesn't already exist in the set? > No point in adding an ip address to an ipset if it's already there unless you > want to update the timeout, if any. > I have a set timeout for each entry, but I'd rather not update it. >
There is currently no way to inhibit updating the timeout. -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
