View source for Easily create and administer a blacklist with ipset/iptables

<span data-link_translate_ro_title="Creați și administrați cu ușurință o listă neagră cu ipset/iptables"  data-link_translate_ro_url="Creați și administrați cu ușurință o listă neagră cu ipset/iptables"></span>[[:ro:Creați și administrați cu ușurință o listă neagră cu ipset/iptables]][[ro:Creați și administrați cu ușurință o listă neagră cu ipset/iptables]]
<span data-link_translate_ru_title="Простое создание и администрирование черного списка с помощью ipset/iptables"  data-link_translate_ru_url="Простое создание и администрирование черного списка с помощью ipset/iptables"></span>[[:ru:Простое создание и администрирование черного списка с помощью ipset/iptables]][[ru:Простое создание и администрирование черного списка с помощью ipset/iptables]]
<span data-link_translate_pl_title="Łatwe tworzenie i zarządzanie czarną listą z ipset/iptables"  data-link_translate_pl_url="Łatwe tworzenie i zarządzanie czarną listą z ipset/iptables"></span>[[:pl:Łatwe tworzenie i zarządzanie czarną listą z ipset/iptables]][[pl:Łatwe tworzenie i zarządzanie czarną listą z ipset/iptables]]
<span data-link_translate_ja_title="ipset/iptablesでブラックリストを簡単に作成・管理できる"  data-link_translate_ja_url="ipset/iptablesでブラックリストを簡単に作成・管理できる"></span>[[:ja:ipset/iptablesでブラックリストを簡単に作成・管理できる]][[ja:ipset/iptablesでブラックリストを簡単に作成・管理できる]]
<span data-link_translate_zh_title="使用ipset/iptables轻松地创建和管理黑名单"  data-link_translate_zh_url="使用ipset/iptables轻松地创建和管理黑名单"></span>[[:zh:使用ipset/iptables轻松地创建和管理黑名单]][[zh:使用ipset/iptables轻松地创建和管理黑名单]]
<span data-link_translate_de_title="Einfaches Erstellen und Verwalten einer Blacklist mit ipset/iptables"  data-link_translate_de_url="Einfaches Erstellen und Verwalten einer Blacklist mit ipset/iptables"></span>[[:de:Einfaches Erstellen und Verwalten einer Blacklist mit ipset/iptables]][[de:Einfaches Erstellen und Verwalten einer Blacklist mit ipset/iptables]]
<span data-link_translate_nl_title="Gemakkelijk een zwarte lijst maken en beheren met ipset/iptables"  data-link_translate_nl_url="Gemakkelijk een zwarte lijst maken en beheren met ipset/iptables"></span>[[:nl:Gemakkelijk een zwarte lijst maken en beheren met ipset/iptables]][[nl:Gemakkelijk een zwarte lijst maken en beheren met ipset/iptables]]
<span data-link_translate_it_title="Creare e amministrare facilmente una lista nera con ipset/iptables"  data-link_translate_it_url="Creare e amministrare facilmente una lista nera con ipset/iptables"></span>[[:it:Creare e amministrare facilmente una lista nera con ipset/iptables]][[it:Creare e amministrare facilmente una lista nera con ipset/iptables]]
<span data-link_translate_pt_title="Criar e administrar facilmente uma lista negra com ipset/iptables"  data-link_translate_pt_url="Criar e administrar facilmente uma lista negra com ipset/iptables"></span>[[:pt:Criar e administrar facilmente uma lista negra com ipset/iptables]][[pt:Criar e administrar facilmente uma lista negra com ipset/iptables]]
<span data-link_translate_es_title="Crear y administrar fácilmente una lista negra con ipset/iptables"  data-link_translate_es_url="Crear y administrar fácilmente una lista negra con ipset/iptables"></span>[[:es:Crear y administrar fácilmente una lista negra con ipset/iptables]][[es:Crear y administrar fácilmente una lista negra con ipset/iptables]]
<span data-link_translate_fr_title="Créer et administrer facilement une blacklist avec ipset/iptables"  data-link_translate_fr_url="Créer et administrer facilement une blacklist avec ipset/iptables"></span>[[:fr:Créer et administrer facilement une blacklist avec ipset/iptables]][[fr:Créer et administrer facilement une blacklist avec ipset/iptables]]
<br />This article has been created by an automatic translation software. You can view the article source [[:fr:Créer et administrer facilement une blacklist avec ipset/iptables|here]].<br /><span data-translate="fr"></span><br />
<span data-link_translate="he"></span><span data-link_translate="ro"></span><span data-link_translate="ru"></span><span data-link_translate="pl"></span><span data-link_translate="ja"></span><span data-link_translate="ar"></span><span data-link_translate="zh"></span><span data-link_translate="de"></span><span data-link_translate="nl"></span><span data-link_translate="it"></span><span data-link_translate="pt"></span><span data-link_translate="es"></span><span data-link_translate="he"></span><span data-link_translate="ro"></span><span data-link_translate="ru"></span><span data-link_translate="pl"></span><span data-link_translate="ja"></span><span data-link_translate="ar"></span><span data-link_translate="zh"></span><span data-link_translate="de"></span><span data-link_translate="nl"></span><span data-link_translate="it"></span><span data-link_translate="pt"></span><span data-link_translate="es"></span><span data-link_translate="en"></span><span data-link_translate="he"></span><span data-link_translate="ro"></span><span data-link_translate="ru"></span><span data-link_translate="pl"></span><span data-link_translate="ja"></span><span data-link_translate="ar"></span><span data-link_translate="zh"></span><span data-link_translate="de"></span><span data-link_translate="nl"></span><span data-link_translate="it"></span><span data-link_translate="pt"></span><span data-link_translate="es"></span><span data-link_translate="en"></span><span data-link_translate="he"></span><span data-link_translate="ro"></span><span data-link_translate="ru"></span><span data-link_translate="pl"></span><span data-link_translate="ja"></span><span data-link_translate="ar"></span><span data-link_translate="zh"></span><span data-link_translate="de"></span><span data-link_translate="nl"></span><span data-link_translate="it"></span><span data-link_translate="pt"></span><span data-link_translate="es"></span><span data-link_translate="en"></span><span data-link_translate="he"></span><span data-link_translate="ro"></span><span data-link_translate="ru"></span><span data-link_translate="pl"></span><span data-link_translate="ja"></span><span data-link_translate="ar"></span><span data-link_translate="zh"></span><span data-link_translate="de"></span><span data-link_translate="nl"></span><span data-link_translate="it"></span><span data-link_translate="pt"></span><span data-link_translate="es"></span><span data-link_translate="en"></span><span data-link_translate="he"></span><span data-link_translate="ro"></span><span data-link_translate="ru"></span><span data-link_translate="pl"></span><span data-link_translate="ja"></span><span data-link_translate="ar"></span><span data-link_translate="zh"></span><span data-link_translate="de"></span><span data-link_translate="nl"></span><span data-link_translate="it"></span><span data-link_translate="pt"></span><span data-link_translate="es"></span><span data-link_translate="en"></span><span data-link_translate="he"></span><span data-link_translate="he"></span><span data-link_translate="he"></span><span data-link_translate="he"></span><span data-link_translate="he"></span><span data-link_translate="he"></span><span data-link_translate="ro"></span><span data-link_translate="ru"></span><span data-link_translate="pl"></span><span data-link_translate="ja"></span><span data-link_translate="ar"></span><span data-link_translate="zh"></span><span data-link_translate="ro"></span><span data-link_translate="pl"></span><span data-link_translate="de"></span><span data-link_translate="nl"></span><span data-link_translate="it"></span><span data-link_translate="pt"></span><span data-link_translate="es"></span><span data-link_translate="en"></span><!-- Début de l'article. Placez votre texte ci-après et n'hésitez pas à personnaliser les chapitres selon votre besoin -->

{{#seo:
|title=Easily create and administer a blacklist with ipset/iptables
|title_mode=append
|keywords=these,are,your,keywords
|description=Easily create and administer a blacklist with ipset/iptables
|image=Uploaded_file.png
|image_alt=Wiki Logo
}}

==Introduction== <!--T:1-->
This article is about setting up and administering a blacklist quickly and efficiently with the tools '''iptables''' and '''ipset'''.<br>
You will need to have '''iptables''' installed.

==Creating the blacklist== <!--T:2-->
Here is how to create a list named '''blacklistv4''' which can contain 1000000 IPv4 addresses (by default 65536):
<pre>
ipset create blacklistv4 hash:ip family inet maxelem 1000000
</pre>

We will then link this list to '''iptables''' so that IP addresses added to this list will be banned.<br>
We add a rule at the very beginning of the input string to discard the IPv4 addresses in the list '''blacklistv4''':
<pre>
iptables -I INPUT 1 -m set --match-set blacklistv4 src -j DROP
</pre>

Using the same procedure, we create a blacklist for IPv6:
<pre>
ipset create blacklistv6 hash:ip family inet6 maxelem 1000000
ip6tables -I INPUT 1 -m set --match-set blacklistv6 src -j DROP
</pre>

==Use of the blacklist== <!--T:3-->

 ===List the IP addresses present== =
To list the IP addresses in your blacklist:
<pre>
ipset list nom_de_votre_liste
</pre>

 ===Add an IP address== =
To add an IP address to your blacklist:
<pre>
ipset add nom_de_votre_liste adresse_IP
</pre>
<big>'''/!\ Be careful /!\'''</big> to fill in an IPv4 address in your list created for IPv4 and an IPv6 address in your list created for IPv6.

 ===Delete an IP address== =
To remove an IP address from your blacklist:
<pre>
ipset del nom_de_votre_liste adresse_IP
</pre>


<!--T:4-->
<!-- Fin de l'article -->
<br /><br />
Cet article vous a semblé utile ? <vote />

<!--T:5-->

<!-- Commentaire -->
<comments />

<!-- Placez ci-dessous la ou les catégories auxquelles se rapporte votre article. Ex: [[Category:Contribute]] [[Category:Linux]] -->
[[Category:Linux]]
[[Category:VPS server]]
[[Category:Dedicated server]]