Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Am implementing ipset on some Fedora 16 systems.

Since ipset rules run in memory and are lost on reboot planning to use a crontab @reboot script to reload the rules and send an email to administrator confirming the ruleset has been loaded.

Is there any problem in this approach or other recommended way to reload ipset rules after a reboot?

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

The only caveat is that you must also add the iptables rules in that use the set after the set has been recreated.

Otherwise if the rules exist in iptables you'll get an error inserting the --set-match rules into iptables since the databases wont exist and iptables as a 'service' in init.d is invoked before cron is.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.