Re: Loding rules

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wednesday 11 December 2002 01:12 pm, nedco@unacs.bg wrote:
> Hi,
>  How to load fast about 20000 rules in iptables.
>  If some document will be help , please let me know  :)
>
> Thanks a lot
> Nedco

As long as you don't need to dynamically define the rules (IE using a 
dynamic IP) iptables-save and iptables-restore should be your simple 
answer.  Oscar's tutorial explains save and restore at: 
http://iptables-tutorial.frozentux.net/chunkyhtml/saveandrestore.html

These will load the complete ruleset in a very few operations, instead of 
about 40000.  (based on your 20000 figure above)

j



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux