Now I want to add a rule to iptables. "iptables -A INPUT -m set --set BADIPS src -j DROP" But it errs with "iptables: No chain/target/match by that name" It seems that iptables does not know about BADIPS? <Grasping />
Sorry for the noise. This was not an ipset problem. It was operator error. My kernel modules got out of sync. There is a BIG difference between "make modules install" and "make modules_install".
Thanks for the ipset module, Jozsef. It replaced a really UGLY iptables ruleset with a very elegant one line solution.
:m)