ufw

Comment 3 for bug 1571579

Revision history for this message
txemi (txemitron) wrote :

Yes, I was thinking adding ipset this way before ufw rules are loaded and then use ipset aliases in ufw rules. This fails:

root:~# ipset -N myset iphash
root:~# ipset -A myset 1.1.1.1
root:~# ipset -A myset 2.2.2.2
root:~# ufw allow from myset
ERROR: Dirección de orígen errónea
root:~#

As you say I was thinking adding ipset commands in /etc/ufw/before.init.

I suppose it would be easy modifying ufw to allow rules using ipset previously added aliases.