]> git.proxmox.com Git - pve-firewall.git/commit - src/PVE/Firewall.pm
projects / pve-firewall.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e0a38de) | patch
optimize blacklist : create a PVEFW-blacklist chain
authorAlexandre Derumier <aderumier@odiso.com>
Mon, 26 May 2014 08:44:55 +0000 (10:44 +0200)
committerDietmar Maurer <dietmar@proxmox.com>
Tue, 27 May 2014 04:25:31 +0000 (06:25 +0200)
commitb5831a0de803b061125811e53d6426f4340380ec
tree8e48bb1e29f874178126e43afa4445a1e8556c8atree
parente0a38def09b4d1a0a86f18857402ce0b075a2552commit | diff
optimize blacklist : create a PVEFW-blacklist chain

currently we check the ipset blacklist twice (1 for log and 1 for drop)

It's better to check ipset once, and go to a PVEFW-blacklist chain
where we do the log, and then the drop

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
src/PVE/Firewall.pm diff | blob | blame | history
Firewall test scripts