https://dhoomketu.net.in/categories/ipset/ Recent content in Ipset on Dhoomketu https://dhoomketu.net.in/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://dhoomketu.net.in/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.163.3 mr Fri, 10 Oct 2025 02:53:27 +0530 https://dhoomketu.net.in/2025/06/using-ipset-for-dynamic-rules/ Wed, 25 Jun 2025 00:00:00 +0000 https://dhoomketu.net.in/2025/06/using-ipset-for-dynamic-rules/ <h1 id="create-set">Create set</h1> <h2 id="ipv4">IPv4</h2> <pre tabindex="0"><code>ipset create block_network hash:net family inet ipset create block_network hash:net timeout 3600 family inet </code></pre><h2 id="ipv6">IPv6</h2> <pre tabindex="0"><code>ipset create block_network6 hash:net family inet6 ipset create block_network6 hash:net timeout 3600 family inet6 </code></pre><h1 id="create-firewall-rules">Create firewall rules</h1> <h2 id="ipv4-1">IPv4</h2> <pre tabindex="0"><code>iptables -I INPUT -m set --match-set block_network src -j DROP </code></pre><h2 id="ipv6-1">IPv6</h2> <pre tabindex="0"><code>ip6tables -I INPUT -m set --match-set block_network6 src -j DROP </code></pre><h1 id="block-network">Block network</h1> <h2 id="ipv4-2">IPv4</h2> <pre tabindex="0"><code>ipset add block_network 192.0.2.0/24 </code></pre><h2 id="ipv6-2">IPv6</h2> <pre tabindex="0"><code>ipset add block_network6 2001:db8::/32 </code></pre><h1 id="unblock-network">Unblock network</h1> <h2 id="ipv4-3">IPv4</h2> <pre tabindex="0"><code>ipset del block_network 192.0.2.0/24 </code></pre><h2 id="ipv6-3">IPv6</h2> <pre tabindex="0"><code>ipset del block_network6 2001:db8::/32 </code></pre><h1 id="flush-set">Flush set</h1> <h2 id="ipv4-4">IPv4</h2> <pre tabindex="0"><code>ipset flush block_network </code></pre><h2 id="ipv6-4">IPv6</h2> <pre tabindex="0"><code>ipset flush block_network6 </code></pre><h1 id="delete-set">Delete set</h1> <pre tabindex="0"><code>ipset destroy block_network ipset destroy block_network6 </code></pre><h1 id="backup">Backup</h1> <pre tabindex="0"><code>ipset save block_network &gt; block_network.ipset ipset save block_network6 &gt; block_network6.ipset </code></pre><h1 id="restore">Restore</h1> <pre tabindex="0"><code>ipset restore &lt; block_network.ipset ipset restore &lt; block_network6.ipset </code></pre><h1 id="delete-firewall">Delete firewall</h1> <pre tabindex="0"><code>iptables -D INPUT -m set --match-set block_network src -j DROP ip6tables -D INPUT -m set --match-set block_network6 src -j DROP </code></pre>