On 07/30/2018 08:17 AM, Tom Eastep wrote: > On 07/30/2018 04:32 AM, Vieri Di Paola via Shorewall-users wrote: >> When using the BLACKLIST policy in a policy file (and defining an ipset in >> DYNAMIC_BLACKLIST), is it possible to add the src IP address ONLY if it >> doesn't already exist in the set? >> No point in adding an ip address to an ipset if it's already there unless >> you want to update the timeout, if any. >> I have a set timeout for each entry, but I'd rather not update it. >> > > There is currently no way to inhibit updating the timeout. > Actually, if you don't specify a timeout in DYNAMIC_BLACKLIST and you create the ipset yourself, including a timeout, then it should work as you want.
-Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
