On Debian 12, I could enable some iplists using "update-ipsets enable firehol_level1 firehol_level2"
But if I do not want to spend server resources on updating firehol_level2 iplist or disable all lists updating, how to do it?
I have tried:
mkdir /dev/shm/ipsetstmpdel && mv /etc/firehol/ipsets/*.{ipset,source,netset} /dev/shm/ipsetstmpdel/
and:
update-ipsets --silent --cleanup
and then:
update-ipsets
it seems like all are disabled.
The directory /etc/firehol/ipsets/ipdeny_country/ still contains around 24MB of various country netsets:
ipip_country_sg.netset ipip_country_tw.netset
can this be also deleted?