search

Lekensteyn / ssh-blocker

Block IP addresses based on SSH logs
11 stars 7 forks source link

nftables support #2

Open zabbal opened 10 years ago

zabbal commented 10 years ago

Would be great to see it instead of ipset. This might also help to resolve some items from todo list automatically.

Lekensteyn commented 10 years ago

nftables is pretty new and if I am not mistaken it should replace iptables, not ipset? What are the advantages of nftables?

zabbal commented 10 years ago

Well, yes, sort-of - it still provide compatibility interface so it should work with ipset too but its advantages makes ipset obsolete so it would be better to use nftables natively.

Some of it described at https://home.regit.org/2014/01/why-you-will-love-nftables/