Ipset

Languages:

English

ipset

ipset logo
Maintainer	Stefano Zamboni
Url	https://github.com/trick77/nftables-blacklist.git
Source:	smeserver-ipset
Category	Security
Tags	iptables, nftables, ipset

Version

smecontribs 11:

1.0-3

smeserver-ipset

The latest version of smeserver-ipset is available in the SME repository, click on the version number(s) for more information.

Description

A Bash shell script which uses ipset and iptables to ban a large number of IP addresses published in IP blacklists. ipset uses a hashtable to store/fetch IP addresses and thus the IP lookup is a lot (!) faster than thousands of sequentially parsed iptables ban rules.

If will place the block list in your INPUT table before xt_geoip and fail2ban. If you also use crowdsec, this one will always take the first rank in the table.

See initial work of Stefano here : https://forums.koozali.org/index.php/topic,55193.msg291088.html#msg291088

Installation

For SME 11

dnf install smeserver-ipset

Configuration

for the moment you can only edit the templates as custom templates to modify the config.

Find more lists

you can seek more here:

1. https://github.com/firehol/blocklist-ipsets
2. https://github.com/ipverse/

Uninstall

yum remove smeserver-ipset  ipset

Bugs

Please raise bugs under the SME-Contribs section in bugzilla

and select the smeserver-ipset component or use this link

Below is an overview of the current issues for this contrib:

No open bugs found.

Changelog

Only released version in smecontrib are listed here.

smeserver-ipset-1.0-3.el8.sme Changelog: SME 11 (smecontribs)

2026/06/28 Jean-Philippe Pialasse 1.0-3.sme
- add ipset requirement, reorder event, release requirement

- expand masq template

2026/06/26 Jean-Philippe Pialasse 1.0-1.sme
- initial release for SME 11 [SME: 13628]

thanks to Stefano Zamboni for that work