- changed status to resolved
New backend: ipset
Issue #35
resolved
IP sets are a framework inside the Linux kernel, which can be administered by the ipset utility. Features: http://ipset.netfilter.org/features.html
I believe that ipset can be great addition to sshguard as it allows to dynamicaly change set of IPs inside linux iptables and speeds up thing a lot. Processing IP sets is much faster and less CPU demanding than individual iptables rules.
Comments (1)
-
- Log in to comment
Added in c3cfbe5.