ipset setlist.

ipset setlist.

[Husnu Demir]

[-- Attachment #1: Type: text/plain, Size: 963 bytes --]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I am trying  to extend 65536 number of iptree limit. TO extend this number I tried
to use setlist.

ipset -S P2PList
# Generated by ipset 4.2 on Wed Mar 17 10:58:38 2010
- -N P2PList setlist --size 24
- -A P2PList p2p
- -A P2PList p2pTorrent
- -A P2PList p2pLRule
COMMIT
# Completed on Wed Mar 17 10:58:38 2010


BUt I could not add directly to the list of list.

ipset -A P2PList 10.1.1.1
ipset v4.2: 10.1.1.1 is already in set P2PList.

Yes I know that it is not used like that but it could be usefull(?)

Also the error is a little bit misleading. As this IP is not at the list :)

Is there any other way to extend this number?


Thanks.

hdemir.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkugms8ACgkQHgR50XBBy+n/2wCgjHiUSw+VFG/7TVjJ6o4qrqpu
lVQAnipxH1FD/QP1D2jrPRXLeIJ2k7un
=0Y3d
-----END PGP SIGNATURE-----

[-- Attachment #2: hdemir.vcf --]
[-- Type: text/x-vcard, Size: 164 bytes --]

begin:vcard
fn:Husnu Demir
n:Demir;Husnu
email;internet:hdemir@metu.edu.tr
tel;work:+903122103330
tel;fax:+903122103303
x-mozilla-html:FALSE
version:2.1
end:vcard

Re: ipset setlist.

[Jozsef Kadlecsik]

On Wed, 17 Mar 2010, Husnu Demir wrote:

> I am trying  to extend 65536 number of iptree limit. TO extend this number I tried
> to use setlist.
> 
> ipset -S P2PList
> # Generated by ipset 4.2 on Wed Mar 17 10:58:38 2010
> -N P2PList setlist --size 24
> -A P2PList p2p
> -A P2PList p2pTorrent
> -A P2PList p2pLRule
> COMMIT
> # Completed on Wed Mar 17 10:58:38 2010
> 
> BUt I could not add directly to the list of list.
> 
> ipset -A P2PList 10.1.1.1
> ipset v4.2: 10.1.1.1 is already in set P2PList.
> 
> Yes I know that it is not used like that but it could be usefull(?)
> 
> Also the error is a little bit misleading. As this IP is not at the list :)
> 
> Is there any other way to extend this number?

Add the IP addresses to the sub-sets, i.e. p2p or p2pTorrent, etc. not the 
toplevel umbrella set.

In the current branch there's no better way to overcome the limitation.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@mail.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary