README

   1 This is the ipset source tree. Follow these steps to install ipset:
   2
   3 0. You need the source tree of your kernel (version >= 2.6.31)
   4    and it have to be configured, modules compiled. Please apply
   5    the netlink.patch against your kernel tree (with kernel <= 2.6.31.1
   6    please use the patch netlink.patch-2.6.31.1). Recompile and
   7    install the patched kernel.
   8
   9 1. Initialize the compiling environment for ipset
  10
  11    % ./autogen.sh
  12
  13 2. Run `./configure` and then compile the ipset binary and the kernel
  14    modules.
  15
  16    The ipset source code depends on the libmnl library.
  17
  18    Configure parameters can be used to to override the default path
  19    to the kernel source tree (/lib/modules/`uname -r`/build),
  20    the maximum number of sets (256), the default hash sizes (1024)
  21    or disable the extra compiler warning flags if your compiler
  22    does not support all of them. See `./configure --help`.
  23
  24    % ./configure
  25    % make
  26    % make modules
  27
  28 3. Install the binary and the modules
  29
  30    # make install
  31    # make modules_install
  32
  33    After installing the modules, you can run the testsuite as well.
  34    Please note, several assumptions must be met for the testsuite:
  35
  36         - no sets defined
  37         - iptables/ip6tables rules are not set up
  38         - the destination for kernel logs is /var/log/kern.log
  39         - the networks 10.255.255.0/24 and 1002:1002:1002:1002::/64
  40           are not in use
  41         - sendip utility is installed
  42
  43    # make tests
  44
  45 4. Cleanup the source tree
  46
  47    % make clean
  48    % make modules_clean
  49
  50 That's it!
  51
  52 Read the ipset(8) and iptables(8) manpages on how to use ipset
  53 and its match and target from iptables.