# Create a set with timeout 0 ipset create test hash:net,port hashsize 128 timeout 5 # Add zero valued element 1 ipset add test 0.0.0.0/0,0 # Test zero valued element 1 ipset test test 0.0.0.0/0,0 # Delete zero valued element 1 ipset del test 0.0.0.0/0,0 # Try to add /0 1 ipset add test 1.1.1.1/0,0 # Try to add /32 0 ipset add test 1.1.1.1/32,tcp:5 # Add almost zero valued element 0 ipset add test 0.0.0.0/1,tcp:8 # Test almost zero valued element 0 ipset test test 0.0.0.0/1,tcp:8 # Test almost zero valued element with UDP 1 ipset test test 0.0.0.0/1,udp:8 # Delete almost zero valued element 0 ipset del test 0.0.0.0/1,tcp:8 # Test deleted element 1 ipset test test 0.0.0.0/1,tcp:8 # Delete element not added to the set 1 ipset del test 0.0.0.0/1,tcp:8 # Add first random network 0 ipset add test 2.0.0.1/24,icmp:ping # Add second random network 0 ipset add test 192.168.68.69/27,tcp:8 # Test first random value 0 ipset test test 2.0.0.255,icmp:ping # Test second random value 0 ipset test test 192.168.68.95,tcp:8 # Test value not added to the set 1 ipset test test 2.0.1.0,icmp:ping # Try to add IP address 0 ipset add test 2.0.0.1,icmp:ping timeout 3 # List set 0 ipset list test | sed 's/timeout ./timeout x/' > .foo0 && ./sort.sh .foo0 # Check listing 0 diff -u -I 'Size in memory.*' .foo hash:net,port.t.list0 # Sleep 5s so that element can time out 0 sleep 5 # IP: List set 0 ipset -L test 2>/dev/null > .foo0 && ./sort.sh .foo0 # IP: Check listing 0 diff -u -I 'Size in memory.*' .foo hash:net,port.t.list1 # Flush test set 0 ipset flush test # Add multiple elements in one step 0 ipset add test 1.1.1.1/24,80-84 timeout 0 # Delete multiple elements in one step 0 ipset del test 1.1.1.2/24,tcp:81-82 # Check number of elements after multi-add/multi-del 0 n=`ipset save test|wc -l` && test $n -eq 4 # Delete test set 0 ipset destroy test # Create set to add a range 0 ipset new test hash:net,port hashsize 64 # Add a range which forces a resizing 0 ipset add test 10.0.0.0/24,tcp:80-1105 # Check that correct number of elements are added 0 n=`ipset list test|grep '^10.0'|wc -l` && test $n -eq 1026 # Destroy set 0 ipset -X test # Create set to add a range and with range notation in the network 0 ipset new test hash:net,port hashsize 64 # Add a range which forces a resizing 0 ipset add test 10.0.0.0-10.0.2.255,tcp:80-1105 # Check that correct number of elements are added 0 n=`ipset list test|grep '^10.0'|wc -l` && test $n -eq 2052 # Destroy set 0 ipset -X test # eof