Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #224789

Re: Network services fail on startup

Show all headers | View raw

Andrei POPESCU wrote: 
> On Lu, 13 iul 20, 18:41:39, Ross Boylan wrote:
> > 
> > The interface has a pre-up script that has over 1,000 iptables add lines
> > for blacklists, and I suspect this is slowing things down enough to cause
> > trouble.  I was not having problems when the script was shorter.
> 
> P.S. as far as I understand nftables should handle these much better 
> than iptables. May or may not help with your actual problem.

iptables is currently a frontend to nftables.

The way to handle a giant blocklist efficiently is ipset, which manipulates
large groups of IPs that will be matched for a particular rule.

-dsr-

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Network services fail on startup Ross Boylan <rossboylan@stanfordalumni.org> - 2020-07-14 03:50 +0200
  Re: Network services fail on startup Andrei POPESCU <andreimpopescu@gmail.com> - 2020-07-14 08:50 +0200
  Re: Network services fail on startup Andrei POPESCU <andreimpopescu@gmail.com> - 2020-07-14 08:50 +0200
    Re: Network services fail on startup Dan Ritter <dsr@randomstring.org> - 2020-07-14 13:20 +0200
      Re: Network services fail on startup Andrei POPESCU <andreimpopescu@gmail.com> - 2020-07-14 19:10 +0200
        Re: Network services fail on startup Dan Ritter <dsr@randomstring.org> - 2020-07-14 19:30 +0200
  Re: Network services fail on startup deloptes <deloptes@gmail.com> - 2020-07-14 09:40 +0200
  Re: Network services fail on startup Greg Wooledge <wooledg@eeg.ccf.org> - 2020-07-14 13:40 +0200
    Re: Network services fail on startup Ross Boylan <rossboylan@stanfordalumni.org> - 2020-07-15 00:30 +0200
      Re: Network services fail on startup Ross Boylan <rossboylan@stanfordalumni.org> - 2020-07-16 02:40 +0200

csiph-web