<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - Please allow ipset add and del via the /proc/net/xt_ipset mechanism"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1328#c2">Comment # 2</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - Please allow ipset add and del via the /proc/net/xt_ipset mechanism"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1328">bug 1328</a>
from <span class="vcard"><a class="email" href="mailto:murf@parsetree.com" title="Steve Murphy <murf@parsetree.com>"> <span class="fn">Steve Murphy</span></a>
</span></b>
<pre>So many thanks for your response. I had no idea that the save format was so
easy to generate. I wrote a go program to translate the 70k+ ip ranges from
voipbl to the save format, and fed it to restore. I've timed it from several
runs now. The runtime of my converter + the run time of the ipset restore was
as low as 1 second wall time. That places it as about 90 times faster than
individual ipset adds being used. That easily beats the xt_recent /proc
interface.
I was delighted it ran so fast. It was SO FAST, that I had to double and triple
and quadruple check that it actually worked!
So, I respectfully withdraw this request. I will close the bug.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>