host_firewall: check the Spamhaus and geo sets under another table name, a dry run against the live name made unlisted addresses match

2026-10-24 17:20:11 +00:00
parent 49834b858b
commit 312be161b9
2 changed files with 8 additions and 6 deletions
@@ -37,7 +37,9 @@ elements() {
 	echo '}'
 } >"$tmp/host-geo.nft"

-nft -c -f "$tmp/host-geo.nft"
+# Checked under another table name: a dry run against the live table name
+# changes the live sets for its duration and unlisted addresses match.
+sed 's/^table inet host {/table inet host_geo_check {/' "$tmp/host-geo.nft" | nft -c -f -
 install -m 0644 "$tmp/host-geo.nft" "$out.new"
 mv -f "$out.new" "$out"