How to add wildcard netmask to ipset?

How to add wildcard netmask to ipset?

[İbrahim Ercan]

Hello,

We are using ipset and we want to add wildcard netmasks to ipset. We
are using hash:net to store our ips. Ipset does not accept adding
netmasks so when adding a network like 192.168.1.0/255.255.255.0 we
convert it to 192.168.1.0/24 CIDR notation and add. But a network like
192.168.2.0/255.0.255.0 cannot be converted to CIDR nor can be added
to ipset. What can we do?

-- 
Ä°brahim Ercan
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

How to add wildcard netmask to ipset?

[İbrahim Ercan]

Hello,

We are using ipset and we want to add wildcard netmasks to ipset. We
are using hash:net to store our ips. Ipset does not accept adding
netmasks so when adding a network like 192.168.1.0/255.255.255.0 we
convert it to 192.168.1.0/24 CIDR notation and add. But a network like
192.168.2.0/255.0.255.0 cannot be converted to CIDR nor can be added
to ipset. What can we do?

-- 
İbrahim Ercan
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: How to add wildcard netmask to ipset?

[Jozsef Kadlecsik]

On Fri, 21 Sep 2012, ?brahim Ercan wrote:

> We are using ipset and we want to add wildcard netmasks to ipset. We
> are using hash:net to store our ips. Ipset does not accept adding
> netmasks so when adding a network like 192.168.1.0/255.255.255.0 we
> convert it to 192.168.1.0/24 CIDR notation and add. But a network like
> 192.168.2.0/255.0.255.0 cannot be converted to CIDR nor can be added
> to ipset. What can we do?

Sorry, ipset does not support wildcard netmasks. You have to fall back to 
iptables.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlecsik.jozsef@wigner.mta.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary

Re: How to add wildcard netmask to ipset?

[Aidas Kasparas]

On 2012.09.21 10:35, Ä°brahim Ercan wrote:
> Hello,
>
> We are using ipset and we want to add wildcard netmasks to ipset. We
> are using hash:net to store our ips. Ipset does not accept adding
> netmasks so when adding a network like 192.168.1.0/255.255.255.0 we
> convert it to 192.168.1.0/24 CIDR notation and add. But a network like
> 192.168.2.0/255.0.255.0 cannot be converted to CIDR nor can be added
> to ipset. What can we do?
>
You can allways add 256 entries into your ipset: 192.i.2.0/24 for all i
in 0..255 .
On the other hand, what do you use masks like these for?

-- 
Aidas Kasparas
IT administrator
GM Consult Group, UAB

+370 686 08473
http://www.gmc.lt

Re: How to add wildcard netmask to ipset?

[Aidas Kasparas]

On 2012.09.21 10:35, İbrahim Ercan wrote:
> Hello,
>
> We are using ipset and we want to add wildcard netmasks to ipset. We
> are using hash:net to store our ips. Ipset does not accept adding
> netmasks so when adding a network like 192.168.1.0/255.255.255.0 we
> convert it to 192.168.1.0/24 CIDR notation and add. But a network like
> 192.168.2.0/255.0.255.0 cannot be converted to CIDR nor can be added
> to ipset. What can we do?
>
You can allways add 256 entries into your ipset: 192.i.2.0/24 for all i
in 0..255 .
On the other hand, what do you use masks like these for?

-- 
Aidas Kasparas
IT administrator
GM Consult Group, UAB

+370 686 08473
http://www.gmc.lt