PINE64

Full Version: FalconGate (PINE A64(+))
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
FalconGate received an update.

There was a problem with the size of ipset "blacklist".
The maximum size of the ipset "blacklist" was 65536. This limit has been reached after adding new lists to FalconGate.

This my little "quick 'n dirty" solution to extend the ipset limit to 500.000 elements.

#1: Save all rules:
Code:
iptables-save > save
ipset save blacklist -i blacklist
ipset save blacklist-user -i blacklist-user

#2: Delete all iptables rules: (blacklist-user is optional!)
Code:
iptables -F INPUT

#3: Delete all blacklist- and blacklist-user rules: (blacklist-user is optional!)
Code:
ipset destroy blacklist
ipset destroy blacklist-user

#4: Create new blacklist- and blacklist-user rules: (blacklist-user is optional!)
Code:
ipset create blacklist hash:ip maxelem 500000
ipset create blacklist-user hash:ip maxelem 500000

#5: Restore saved ipset rules: (blacklist-user is optional!)
Code:
ipset restore -i blacklist
ipset restore -i blacklist-user

#6: Restore saved iptables-rules:
Code:
iptables-restore < save


Best regards
Julian
Updated FalconGate (PINE A64(+)) 20170705 on Wiki and PINE64 Installer.