[elrepo] ipset :: offtopic :: sysinit script

[Adrian Sevcenco]

On 04/11/2014 11:25 AM, Trevor Hemsley wrote:
> On 11/04/14 07:44, Adrian Sevcenco wrote:
>> On 04/09/2014 03:29 AM, Trevor Hemsley wrote:
>>> The kernel-{lt,ml} packages do not have a stable kernel ABI so any
>>> module built for it would need to be rebuilt for each kernel. Maybe the
>>> ipset options could be turned on in the kernel-lt config so you'd just
>>> need userspace tools.
>>>
>>> I've been running ipset 4.5 on all our el5 servers at $dayjob since the
>> Hi guys, sorry to hijack the thread!
>> Is there some kind of "official" sysinit script for starting/stop ipset
>> (with restoring the info)?
>> I understood that just "ipset -file ipset.rules save" (on stop) and
>> after that in start "ipset flush && ipset -file ipset.rules restore"
>> is somehow not recommended...
> 
> There is an initscript in the packages that I built and uploaded to the
> bugtracker web page. It's based on the iptables one from RH with
> amendments to use the ipset version of iptables-save/iptables-restore.
> It does need tweaking if you need to use the script on el6 (where RH
> helpfully don't supply one at all).
Thanks for info!

Adrian

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2272 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.elrepo.org/pipermail/elrepo/attachments/20140411/a9316f95/attachment.p7s>