FalconGate (PINE A64(+))

[JulianM]

FalconGate received an update.

There was a problem with the size of ipset "blacklist".
The maximum size of the ipset "blacklist" was 65536. This limit has been reached after adding new lists to FalconGate.

This my little "quick 'n dirty" solution to extend the ipset limit to 500.000 elements.

#1: Save all rules:

Code:

iptables-save > save
ipset save blacklist -i blacklist
ipset save blacklist-user -i blacklist-user

#2: Delete all iptables rules: (blacklist-user is optional!)

Code:

iptables -F INPUT

#3: Delete all blacklist- and blacklist-user rules: (blacklist-user is optional!)

Code:

ipset destroy blacklist
ipset destroy blacklist-user

#4: Create new blacklist- and blacklist-user rules: (blacklist-user is optional!)

Code:

ipset create blacklist hash:ip maxelem 500000
ipset create blacklist-user hash:ip maxelem 500000

#5: Restore saved ipset rules: (blacklist-user is optional!)

Code:

ipset restore -i blacklist
ipset restore -i blacklist-user

#6: Restore saved iptables-rules:

Code:

iptables-restore < save

Best regards
Julian