1 This is the ipset source tree. Follow these steps to install ipset:
3 0. You need the source tree of your kernel (version >= 2.6.16 or 2.4.36.x)
4 and it have to be configured, modules compiled.
6 1. Compile ipset and it's kernel modules
8 # make KERNEL_DIR=<<where-you-built-your-kernel>>
10 You can specify the maximum number of sets (default 256)
11 and/or the hash size for bindings (default 1024) if you want:
13 # make KERNEL_DIR=<<where-you-built-your-kernel>> \
14 IP_NF_SET_MAX=<<your setsize number>> \
15 IP_NF_SET_HASHSIZE=<<your hashsize number>>
17 If your compiler does not support all of the extra warning
18 flags, you can disable those too:
20 # make KERNEL_DIR=<<where-you-built-your-kernel>> \
21 IP_NF_SET_MAX=<<your setsize number>> \
22 IP_NF_SET_HASHSIZE=<<your hashsize number>> \
23 NO_EXTRA_WARN_FLAGS=yes
25 2. Install the binary and the modules
27 # make KERNEL_DIR=<<where-you-built-your-kernel>> install
29 3. Cleanup the source tree
31 # make KERNEL_DIR=<<where-you-built-your-kernel>> clean
35 Read the ipset(8) and iptables(8) manpages on how to use ipset
36 and its match and target from iptables.
38 If you want to build a non-modular >= 2.6.16 kernel or has got a 2.4.36.x
39 kernel tree, then proceed with the following steps:
41 1. Compile the ipset binaries
43 # make KERNEL_DIR=<<where-you-built-your-kernel>> binaries
45 2. Install the ipset binaries
47 # make KERNEL_DIR=<<where-you-built-your-kernel>> binaries_install
49 3. Patch your kernel source
51 # make KERNEL_DIR=<<where-you-built-your-kernel>> patch_kernel
53 4. Go to the kernel source and run 'make oldconfig', enable the ipset
54 functionality and compile, install your kernel.