1. A

    firewalld: update timeout of an ipset entry

    I have been trying to figure out how to update the timeout of an ipset entry, with no luck so far, when using native ipset I would just simply use: $ ipset add foo timeout N -exist but firewalld doesn't seems to implement this feature according to the manual (man), which is a...
  2. K

    How to block IP address by country range using ipset?

    I need to block web traffic from a certain country. I can export a free IP address list using IP2Location firewall list generator. The sample output format in CIDR is as below. There are other formats but I'm not sure if it is supported by ipset or not. What should I do next to import the list...