ipset_update_from_file is strict CIDR only for Nets and addfile is lax and imports both IP and CIDR into Nets IPsets about firehol HOT 1 OPEN

Just realized this effects the updating of all the firehol blacklists since their .netset's are mixed addresses. Initial loading of Firehol loads everything on the lists fine. Update ignores new IP's and only updates new CIDR entries.

Whether strict or lax on mixing IP and CIDR, I think addfile and ipset_update_from_file both should be consistent on how they deal with it?

Maybe everyone else sorts the Firehol blacklists into separate IP and Net lists?

Cheers,
Ryan

from firehol.