dpsystems / web-shield Goto Github PK

Can I suggest a couple of different things you can do with loading ipset sets?

1. When you add an entry to a set use the -exist flag in case of duplicates.
2. Never load in to the set you want to use. This sounds counter-intuitive, but if you are loading into a set web-shield, instead load into a set web-shield-temp. Then when it is loaded, swap web-shield-temp with web-shield and delete web-shield-temp

# ensure that ipsets exist
ipset destroy -q web-shield-temp
ipset -N web-shield-temp nethash -exist
ipset -N web-shield nethash -exist

# load ipset sets here

# swap sets
ipset swap web-shield web-shield-temp

# ensure that temp sets do not exist
ipset destroy -q "web-shield-temp"

You can then safely run your script multiple times without duplications.

3. In your firewall script also create an empty ipset set so it does not fail if you have not created your sets. Then the two scripts can be run in any order.

Many thanks to @DPsystems

Not an issue, but a question :)

Raspberry Pi OS Bullseye

I was waiting for this since i'm running "Login-Shield" :)

I'm not sure how to set it up.

I successfully have running an instance of "Login-Shield" and to me "Web-Shield" seems to be an add-on.

So saving "START.web-shield.sh" to "/usr/local/bin/Login-Shield-master/", customize, rename to "S.web-shield.sh" and run as root should do it, right?. Will i miss something or maybe completely screw up my system?

Some guidance would be great.