I want to first say what a wonderful job the leaf development team is doing.

I have a unique requirement for my iptables firewall.  I would like to be
able to parse a blacklist of around 100,000 entries quickly.  I was
wondering the best way to do this.  I know there is a RECENT table (in
/proc) where IP addresses can be placed for a period of time.  I also know
that there is a 100 entry limit to it.

Is there a table similar to RECENT that I can place 100,000 blacklisted IP
addresses and have them parsed very quickly, say using a hash table or
something.  As this would be checking traffic real-time, it would have to be
efficient.

I would appreciate someone steering me in the right direction.

Thank you in advance.

DEAN

[EMAIL PROTECTED]


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com

_______________________________________________
leaf-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to