[Bug 1687] Define set of set with in ipset list:sets

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1687

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |WONTFIX

--- Comment #6 from Pablo Neira Ayuso <pablo at netfilter.org> ---
(In reply to Phil Sutter from comment #5)
> Just for clarification as I'm not sure where to pick you up:
> 
> Pablo's example makes use of defines which resolve in user space (i.e., when
> parsing input. The three sets FR, MC and CH he defines merge into the geoip
> named set before the whole thing is applied in kernel space, creating a
> single
> set containing all the elements.

No plans to support for this multi-lookup feature.

If you would like to know what country this IP belongs to, then you could
combine this with mark.

define FR = {
        1.1.1.1 : 1,
}

define MC = {
        2.2.2.2 : 2,
}

define CH = {
        3.3.3.3 : 3,
}

table ip filter {
        map geoip {
                type ipv4_addr : mark
                elements = { $FR, $MC, $CH }
        }
}

In this example above, mark 1 corresponds to FR, mark 2 to MC and mark 3 to CH.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20230913/851f70e6/attachment.html>