Ipset

[grooverdan]

d'oh -- escaped my mind (as many things ;) ) -- please add those exemplar jail definitions to
config/jail.conf, following "standard" ssh-iptables as an example (i.e. add enabled = false, maxretry)

Done.

yarikoptic commented an hour ago
damn IPv6... sooner or later it will get handled... ;-)

working on this now....

For ipv6 a 'family inet6' is needed on the create set.
and if that would be the only difference (if we forget about /48 masking)... hints again on trying to
avoid duplication... but for that -- later I guess