Re: banning bot ips with ipset

[Nigel Heron <nigel-ml@xprima.com>]

Jozsef Kadlecsik wrote:

> ipset is stable enough for in production usage. The speed of the iphash 
> set is actually constant by nature and independent of the number of actual 
> entries (your network card and bus will slow you down and not iphash).
>  

thanks for everyone's feedback, we tried it on a test box with all our 
rules and it seems to work really well. we'll try it live during the week.

>> also, if it helps anyone else .. while trying ipset 2.4.5 i had to add:
>> #include <stdbool.h>
>> to "kernel/ip_set_setlist.c" to get it to compile.
> 
> What is your kernel version?
> 

2.6.18.2 which comes with opensuse 10.2
gcc "4.1.2 20061115 (prerelease) (SUSE Linux)" .. also bundled with 
opensuse 10.2


thanks,
-nigel.