[EMAIL PROTECTED] wrote: > Is there a limit on the number of entries in the shoerwall blacklist?
No. But long blacklists are performance-sapping. You should definitely set BLACKLISTNEWONLY=Yes and remember that every accepted connection must run the gauntlet of your entire black list. With a large blacklist, the use of ipsets is recommended. > > Also, does anyone know of any kind of an optimizer that could be run > with a list of CIDR addresses to minimize the list? No - Sorry. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
