On Tue, 20 Apr 2004, Feizhou wrote: > Jozsef Kadlecsik wrote: > > On Mon, 19 Apr 2004, Feizhou wrote: > > > > > >>when will ipset be available in 2.6? > > > > > > It needs more, exhaustive testing. ippool was tested more widely than > > ipset. > > Oh...those that mean both can actually be compiled in 2.6? A minor fix is required to "port" both to 2.6. > Lovely. Does ippool/ipset take ips only or will they also take cidrs? ippool accepts IP addresses. In ipset, you can store CIDR netblock as well. > BTW...mail.so-net.com.hk is an ISP smarthost...could you block > so-net.com.hk not coming from 203.99.142.22 instead of a domain rule > block on rdns and sender addy? > > And maybe all emails from 203.99.142.22 if sender addy not in > so-net.com.hk... netfilter was not designed to filter E-mail. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary
