INPUT_direct chain

Thomas Woerner twoerner at redhat.com
Fri Jan 24 14:24:37 UTC 2014


On 01/24/2014 03:10 PM, John Griffiths wrote:
> In August of last year, I was told on the list to use ipsets to add ips
> to the drop list.
>
> Seeing all the traffic on direct chain, should I be going this direction
> now?
>
It is good to go in this direction for separation, but it is not a 
requirement.

I will be having a look at network address sets (ipset) support in 
firewalld again. I am also thinking about the possibility to support 
externally generated ipsets.

> Regards,
> John
> _______________________________________________
> firewalld-users mailing list
> firewalld-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/firewalld-users
Regards,
Thomas


More information about the firewalld-users mailing list