Subj : Alternative(s) to ipset on OpenVZ
To   : Joaquim Homrighausen
From : Alexey Vissarionov
Date : Wed Dec 06 2017 23:02:00

Good ${greeting_time}, Joaquim!

06 Dec 2017 16:41:08, you wrote to IPTABLES phreaks :):

 JH> Does anyone know of an alternative to ipset for blocking IP
 JH> ranges of entire countries, that works with OpenVZ containers?

If you want to do exactly that, simply use CIDR notation with -s parameter.

However, if you need (just a guess) to protect SSH against bruteforcing the 
passwords, that's normally performed a bit differently.


--
Alexey V. Vissarionov aka Gremlin from Kremlin
gremlin.ru!gremlin; +vii-cmiii-cmlxxvii-mmxlviii

.... GPG: 8832FE9FA791F7968AC96E4E909DAC45EF3B1FA8 @ hkp://keys.gnupg.net
--- /bin/vi
 * Origin: http://openwall.com/Owl (2:5020/545)

.