I am trying to establish a whitelist of clients that have successfully logged into the system, using
ipset. What options do I have to let an entry age so that I can later discard it based on its age?
Is there a better method than the idea outlined below?
I have not found anything provided by
ipset directly, so I am trying to establish whether or not such a facility exists within the scope of
Right now the only idea I have come up with is to use a cronjob that swaps the list every X minutes or hours. So as an example I'd have a list
whitelist which is active, plus a list for the next hour (say for 21:00
whistelist_21), if I am some time between 20:00 and 20:59. Any client connecting now would be added to the active
whitelist and to the whitelist for next hour (or a given period). Then at each full hour (or given period) a cronjob - e.g. at 21:00 in the above case - swaps the existing
whitelist for the
whitelist_21 one and disposes of the (now renamed)
ipset swap whitelist whitelist_21 ipset destroy whitelist_21