[Feature request] ipset method does not include creating the ipset and inserting the ipset into iptables

[TechnologyClassroom]

I will see if I can make a patch for this.

[TechnologyClassroom]

The missing commands would look like this:

# Create ipset for fortress.
ipset -exist -N fortress4 hash:net family inet maxelem 100000
# Create iptables rules for fortress ipset.
iptables -w 10 -I INPUT 1 -m set --match-set fortress4 src -j DROP
iptables -w 10 -I FORWARD 1 -m set --match-set fortress4 src -j DROP

The 4 is for IPv4. Once the additional infrastructure to handle IPv6 is introduced, the additional commands for IPv6 would look like this:

# Create ipset for fortress.
ipset -exist -N fortress6 hash:net family inet6 maxelem 100000
# Create iptables rules for fortress ipset.
ip6tables -w 10 -I INPUT 1 -m set --match-set fortress6 src -j DROP
ip6tables -w 10 -I FORWARD 1 -m set --match-set fortress6 src -j DROP