Hi friends I want to block the offensive network list supplied by dshield (http://feeds.dshield.org/block.txt) using IPSET match, anybody tell me if the following stuff is correct. ipset -N bogons-nets nethash ipset -A bogons-nets 81.208.28.0/24 ipset -A bogons-nets 141.50.163.0/24 .......... iptables -N blocklist iptables -A bogons-nets -m set --set bogons-nets scr,dst -j drop iptables -A INPUT -i ! lo -m state ! --state ESTABLISHED -j blocklist iptables -A FORWARD -m state ! --state ESTABLISHED -j blocklist iptables -A OUTPUT -o ! lo -m state ! --state ESTABLISHED -j blocklist I want to block the source and destination traffic from/to this networks, I'm not sure regarding how to use the tokens src and dst and the set type (nethash) in IPSET??? Thanks in advanced ********************************** CTO: Eng. Jorge Agrelo O. WEb: www.novadevices.com E-Mail: jagrelo@xxxxxxxxxxxxxxx Phone: (593-2) 225-7711 ext. 105 Av. Brasil N44-12 y Condor, Quito-Ecuador **********************************
