From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marek Kierdelewicz Subject: Re: banning bot ips with ipset Date: Wed, 26 Nov 2008 08:45:07 +0100 Message-ID: <20081126084507.6e3de53c@catlap> References: <492C6780.4020909@xprima.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <492C6780.4020909@xprima.com> Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii" To: Nigel Heron Cc: netfilter@vger.kernel.org >Hi list, Hi, >obviously not a good long term solution. We just came across ipset, but >the lack of any feedback on the net (besides on *.netfilter.org) has us >a bit worried about real world deployment. > Is ipset stable enough to be deployed on live environments? I'm using ipset for customer access control at linux boxes (routers at ISP company). It's mature, stable and as Mr Haywood said - also scalable. Cheers, Marek Kierdelewicz