On Fri, 23 Mar 2007, Andy Smith wrote: > Have you tried inserting them as null routes into your routing table > instead?
That won't be nice to the box, either. > Even with ipset I would not consider putting this many rules into > iptables. It can be collapsed to one rule (or a small number of them) with ipset. I don't know if the set lookup is O(1) for such a large set, though. Should waste a great deal of memory, too. -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
