When I run the update script for voipbl manually, I get this error from ipset: ipset v6.11: Hash is full, cannot add more elements. I am running it manually because some IPs that are on the blacklist seem to still be getting through the firewall. From the man pages for ipset it would seem to have something to do with increasing the hash size, or the maximum number of elements, but neither of those seem to work for me.
Here is the listing for the set:
CommandMe-> ipset voipbl -l Name: voipbl Type: hash:ip Header: family inet hashsize 2048 maxelem 200000 Size in memory: 16460 References: 1 Members:
This appears to be how many addresses made it into the set:
CommandMe-> ipset -l |wc -l 65549
The manual says the default maximal number of elements which can be stored in the set is 65536. I seem to be going over that limit, but cannot get more than 65549 elements in.
I've got about 80000 addresses in the blacklist. Am I getting this error because ipset was unable to store the remaining IPs (65550-80000) in the hash? Can someone please point me in the right direction? Thanks!