Jozsef Kadlecsik wrote:
ipset is stable enough for in production usage. The speed of the iphash
set is actually constant by nature and independent of the number of actual
entries (your network card and bus will slow you down and not iphash).
thanks for everyone's feedback, we tried it on a test box with all our
rules and it seems to work really well. we'll try it live during the week.
also, if it helps anyone else .. while trying ipset 2.4.5 i had to add:
#include <stdbool.h>
to "kernel/ip_set_setlist.c" to get it to compile.
What is your kernel version?
2.6.18.2 which comes with opensuse 10.2
gcc "4.1.2 20061115 (prerelease) (SUSE Linux)" .. also bundled with
opensuse 10.2
thanks,
-nigel.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
