[elrepo] ipset :: offtopic :: sysinit script

[Trevor Hemsley]

On 11/04/14 07:44, Adrian Sevcenco wrote:
> On 04/09/2014 03:29 AM, Trevor Hemsley wrote:
>> The kernel-{lt,ml} packages do not have a stable kernel ABI so any
>> module built for it would need to be rebuilt for each kernel. Maybe the
>> ipset options could be turned on in the kernel-lt config so you'd just
>> need userspace tools.
>>
>> I've been running ipset 4.5 on all our el5 servers at $dayjob since the
> Hi guys, sorry to hijack the thread!
> Is there some kind of "official" sysinit script for starting/stop ipset
> (with restoring the info)?
> I understood that just "ipset -file ipset.rules save" (on stop) and
> after that in start "ipset flush && ipset -file ipset.rules restore"
> is somehow not recommended...

There is an initscript in the packages that I built and uploaded to the
bugtracker web page. It's based on the iptables one from RH with
amendments to use the ipset version of iptables-save/iptables-restore.
It does need tweaking if you need to use the script on el6 (where RH
helpfully don't supply one at all).

T