Installing update ipsets

update-ipsets is part of FireHOL.

You can use update-ipsets without FireHOL. update-ipsets will does not depend on it. You have to install it to your computer though.

update-ipsets is a new member of the FireHOL suite. It has not been released yet. So, even if you already use FireHOL, you have to download the latest development version of it to have update-ipsets.

The following procedure installs FireHOL to your computer.

---

Install update-ipsets (and FireHOL)

The FireHOL repo includes update-ipsets.

This is a quick guide to install it:

# cd somewhere
cd /tmp

# download FireHOL source from github
git clone https://github.com/firehol/firehol.git firehol.git

# cd to it:
cd firehol.git

# configure it:
sudo ./autogen.sh

# make sure autogen.sh completes successfully

# then run:
sudo ./configure --prefix=/usr --disable-man --disable-doc

# make sure configure completes successfully
# (of course you can omit --disable-man and --disable-doc
# though, man and doc generation have a few more package dependencies)

# install it
sudo make CFLAGS="-O3" install

# make sure it completes successfully.

The above installs the development version of FireHOL on your computer, which includes the latest update-ipsets.

To run it, use something like this:

update-ipsets enable dshield

Keep in mind update-ipsets supports running as either root or any normal user.

Check Downloading IP Lists to learn how to use it.

---

Install update-ipsets (without FireHOL)

If you don't want to install the development version of FireHOL, you can follow this procedure:

# cd to your home
cd

# download firehol
git clone https://github.com/firehol/firehol.git firehol.git

# cd to it
cd firehol.git

# don't configure or build it

# use this:
cd sbin
make -o iprange -O3 -pthread iprange.c

# you will have to install iprange to your system
sudo cp iprange /usr/bin/

# In the same directory there is a file called update-ipsets.in
# install this file too:

sudo cp update-ipsets.in /usr/bin/update-ipsets

You have now installed iprange and update-ipsets without FireHOL.