PINE64
FalconGate (PINE A64(+)) - Printable Version

+- PINE64 (https://forum.pine64.org)
+-- Forum: PINE A64(+) (https://forum.pine64.org/forumdisplay.php?fid=4)
+--- Forum: Linux on Pine A64(+) (https://forum.pine64.org/forumdisplay.php?fid=6)
+--- Thread: FalconGate (PINE A64(+)) (/showthread.php?tid=4571)



FalconGate (PINE A64(+)) - pineadmin - 05-31-2017

FalconGate (PINE A64(+)) 20170430


RE: FalconGate (PINE A64(+)) 20170430 - JulianM - 06-16-2017

FalconGate received an update.

There was a problem with the size of ipset "blacklist".
The maximum size of the ipset "blacklist" was 65536. This limit has been reached after adding new lists to FalconGate.

This my little "quick 'n dirty" solution to extend the ipset limit to 500.000 elements.

#1: Save all rules:
Code:
iptables-save > save
ipset save blacklist -i blacklist
ipset save blacklist-user -i blacklist-user

#2: Delete all iptables rules: (blacklist-user is optional!)
Code:
iptables -F INPUT

#3: Delete all blacklist- and blacklist-user rules: (blacklist-user is optional!)
Code:
ipset destroy blacklist
ipset destroy blacklist-user

#4: Create new blacklist- and blacklist-user rules: (blacklist-user is optional!)
Code:
ipset create blacklist hash:ip maxelem 500000
ipset create blacklist-user hash:ip maxelem 500000

#5: Restore saved ipset rules: (blacklist-user is optional!)
Code:
ipset restore -i blacklist
ipset restore -i blacklist-user

#6: Restore saved iptables-rules:
Code:
iptables-restore < save


Best regards
Julian


RE: FalconGate (PINE A64(+)) - pineadmin - 08-15-2017

Updated FalconGate (PINE A64(+)) 20170705 on Wiki and PINE64 Installer.