1、安装kmod-ipset和ipset
rpm -i kmod-ipset-4.5-1.2.6.18_238.el5.x86_64.rpm
rpm -i ipset-4.5-1.el5.x86_64.rpm
2、ipset创建ip集合
ipset -N test nethash
ipset -A test 192.168.1.0/24
ipset --list
3、iptables规则设置
iptables -I INPUT -m set --set test src -j DROP
4、报错处理
设置完iptables规则启动iptables的时候，可能会出现如下报错：
Applying iptables firewall rules: iptables-restore v1.3.5: Couldn't load match `set':/lib64/iptables/libipt_set.so: cannot open shared object file: No such file or directory
rpm2cpio iptables-1.3.5-5.6.1.el5.x86_64.rpm | cpio -idmv
cp lib64/iptables/libipt_set.so /lib64/iptables/
重新启动iptables即可
