ipset v6.19: Sets cannot be swapped: the second set does not exist

[aww+]

showed up today in the logs

Code: Select all

 Retrieved and blocking blocklist XYZ IP address ranges
 IPSET: loading set new_XYZ with 167 entries
 IPSET: switching set new_XYZ to bl_XYZ
 *Error* IPSET: [ipset v6.19: Sets cannot be swapped: the second set does not exist]
 

(btw on another server not using IPSET the blocklist was applied but that is probably obvious)

[ForumAdmin]

That will happen if you change the csf or blocklist settings and only restart lfd without first restarting csf which sets up the sets.

[aww+]

It would be nice if CSF didn't have to be restarted to load a new set.

Even with the fast restart feature, with very large sets it can take awhile and leaves the server vulnerable (and causes a heavy load).

Maybe a future feature for LFD would be to create the set if it fails to swap?