Good ${greeting_time}, Joaquim!
06 Dec 2017 16:41:08, you wrote to IPTABLES phreaks :):
JH> Does anyone know of an alternative to ipset for blocking IP
JH> ranges of entire countries, that works with OpenVZ containers?
If you want to do exactly that, simply use CIDR notation with -s parameter.
However, if you need (just a guess) to protect SSH against bruteforcing the
passwords, that's normally performed a bit differently.
--
Alexey V. Vissarionov aka Gremlin from Kremlin
gremlin.ru!gremlin; +vii-cmiii-cmlxxvii-mmxlviii
... GPG: 8832FE9FA791F7968AC96E4E909DAC45EF3B1FA8 @ hkp://keys.gnupg.net
--- /bin/vi
* Origin: http://openwall.com/Owl (2:5020/545)
|