4 ms·

No ipset or iptables? Hard pass. There is literally no reason for them to get rid of something that works, and isn't full of security holes. Edit: while nfta

No ipset or iptables? Hard pass. There is literally no reason for them to get rid of something that works, and isn't full of security holes. Edit: while nftables can replace iptables, I don't know of a replacement for ipset.

supriyo-biswas 3y ago
https://wiki.nftables.org/wiki-nftables/index.php/Sets https://wiki.nftables.org/wiki-nftables/index.php/Sets
- nubinetwork 3y ago
  Interesting, thanks. Why does the syntax suck? "ipset add blackhole 192.168.3.4" is far easier to remember than "nft add element ip filter blackhole { 192.168.3.4 }"
  - Alifatisk 3y ago
    The latter look hideous
  - yamtaddle 3y ago
    As far as I can tell, all the authors of new networking tools on Linux just loooooove Cisco's IOS. All these new commands look like they'd be perfectly at home there, and seem very alien to me on Linux.