New backend: ipset

IP sets are a framework inside the Linux kernel, which can be administered by the ipset utility. Features: http://ipset.netfilter.org/features.html

I believe that ipset can be great addition to sshguard as it allows to dynamicaly change set of IPs inside linux iptables and speeds up thing a lot. Processing IP sets is much faster and less CPU demanding than individual iptables rules.

Comments (1)