[From nobody Fri May 1 20:45:05 2026 Received: (at 1006544-done) by bugs.debian.org; 1 May 2026 19:43:10 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-111.1 required=4.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FROMDEVELOPER,PGPSIGNATURE,SPF_HELO_NONE,SPF_NONE,UNPARSEABLE_RELAY, USER_IN_DKIM_WELCOMELIST,VERSION autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 64; hammy, 150; neutral, 106; spammy, 0. spammytokens: hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin, 0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311, 0.000-+--H*RT:311, 0.000-+--H*RT:108 Return-path: <biebl@debian.org> Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:43284) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <biebl@debian.org>) id 1wItlW-000UNZ-0b for 1006544-done@bugs.debian.org; Fri, 01 May 2026 19:43:10 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.stravinsky; h=X-Debian-User:Content-Type:In-Reply-To:From:Subject: References:To:MIME-Version:Date:Message-ID:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description; bh=nE5B65F9VWDtlyxxmEz41fU3WaxBQtDZPRJBfYHtTUQ=; b=Rnq676JCNKi4tOEAOOsjJj7iwT 0Co0YCd4sfoaFQA+nc5WVKkJrYA2twnXTFJN23yLBelEE0hrLB+RLtwkBi8WkltZgUw/02MqrSkpE XSxYs+00i5TLrjrbrWoSFxFsWXGFc+CTaQSnQIU4+3soznf2id95OjW63LW6cVmNsxV9bqEfCVYmH cQs0Ry435n+Yzq6S39PpAcdrh6+NJCds5/I7jFUrjt3WPS6H7pYJUVFEN1ep/atelT6p++4501oEY hEK9ZJpp33PoZKrBKTSaiL2d4OaUdsTkukcgmLlYyaXqtprT6e4B8eZvuAMlm8/pqTpEgcJ7NbXN7 xu++pTGA==; Received: from authenticated user by stravinsky.debian.org with esmtpsa (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_128_GCM:128) (Exim 4.96) (envelope-from <biebl@debian.org>) id 1wItlU-008sUP-1W; Fri, 01 May 2026 19:43:08 +0000 Message-ID: <b54e69c7-47dc-4dc9-a5e3-9bd65211c17d@debian.org> Date: Fri, 1 May 2026 21:43:07 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: 1006544-done@bugs.debian.org, Felix Niederwanger <felix@feldspaten.org> References: <a70a765d58a52f5642bf005cf2b081ce05147910.camel@feldspaten.org> <a70a765d58a52f5642bf005cf2b081ce05147910.camel@feldspaten.org> Subject: Re: firewall-cmd times out with large blocklists Content-Language: en-US From: Michael Biebl <biebl@debian.org> Autocrypt: addr=biebl@debian.org; keydata= xsFNBEsA+IABEACfFA3gFej3NPRVrZxQfkI+O4S86osi4y0xhj8quvzv+PV68Q4CN/Bt7WWd Oq0rtRSaTL3HEGfvEkiRFB6RfaeEL7YejjBK+TsxnjPPuUs30Tr1W/E7n4/zPdMW65R8bq28 hQvf7gDMgRV3PrV5bx1tY7OF6f9uSoG3c9zLWjVZOjZFu+9XQYMGI3FpcGk9I/fD9XwKXd/u aP+8xXB8DAo9bduIlWyepZkRhJG1GERjHscvHvITN9GqvpwqWFOapRdWZetNLliBqGvmUDT7 PNH8XTyHzsXRUB38gPrIYAU2mufdDLdeFdJT1OMeenolgfhc4J6ZY0VprRI1HCZ/5N12XYZY +3Bt7hWU26m8hRnyjGR5BFP50nIikuQrDeBoft0qElcWMZ9QGIMxlqARMZZQbc79nDlyQUSq BP3b03ljbJhMrE7uiIXVEyIWZZyECRAlHGHkdCFpcVOkraSTANjIApd9RBUYNZxZbyyuAN/R 8QXyOVysrtQ2wPVKAIXWpuQ2xQtbOjun3gkvqNiXgVl5g9blyKOHVmvRDOQfb1+Pr/QSNJW0 +WQ1D+s4uY7y7TI7l7iiSFjLUMvgEJfYkauXaSIhDEEecYyldqbaCQ4UXrZbKwrzB1gT3NYI CLh9vy/Evx5l9xDSA5BTke2obWo7zOmCV0GqtwJPLwQ7BN1T4wARAQABzSBNaWNoYWVsIEJp ZWJsIDxiaWVibEBkZWJpYW4ub3JnPsLBdwQTAQgAIQUCSwD9HQIbAwULCQgHAwUVCgkICwUW AgMBAAIeAQIXgAAKCRBq4d8NYI8i3JiSEACOXwvwURzAKGp6cZwICwYGOZbWwcVg+DweP/ur rGIKAvspfRb3Yn5yWqOm9smAbXPJgZQihdtqKEq3uB4Sy4lAYNE2BfLOFAD9DsH38qYEUuEe mqS6iAu/2n8vSic9A+nvg/ZiWWK+GoOpPk0ayxnRrB6HNgW07cPUKS9jW3coujp9STz4hUlU EKyhxFB22KIDBdC8A2MuLo6EPnspM0aPIYGc55CqhIeRKHHS0TLjQpOu9GW0JA1dbrWZSqdg s4ja1VjR4ors8n7DNUxNl4DHbskXbQQUZ0PyYVFAXn5i6NTD7+vkS4Ol5jIHRqsuREHPtCim +2J4XooArE9KfGMuixjTVV6wqCh9K0Mcg941MeJgBCvt8ehw/le+00zGJPxhkHOV1oDQWwCn DQr5Wdm+bqPsCWmb34Uz/jY2CxdH1KHnmAUPxnnq95MWpZxF3/z9k83U2B5J8/tvp/Ir5w4X xZDAfoRYX0FExXrmRZcqrqAXCuWJF97AVlrGnvSpUOskFT8I0KkCNTFtbieQ1DJbIxTlbVML zB01APfpjw4SxLH6zXcL0mivOdiNIG0NBOqYMZmyQ8wUFvB9UwEg1ypa2CNT4j3im5OVNsv2 ERKFjdjOjedT0ul9FbXsi5xu7USGZaEn25fFDdUSR3hFj8IhgE0NGSRUjTiOuuSdGH3Hw87B TQRLAPiAARAAoU7siZ7PHGZWRNMwblJFRb9EVT0snNNiUEMQi5UoIWLM6VXutpStqCp2DWkM 5GZUbQPvzI1A5CaeA3ZXgE00OyRUHAC9edhUIoXu48n9f7SI/o8tPE85RTGWm3lpIavQpZqA bYbRJAgZl8kmyzLWlXV7h4PWJw2Scwej93VaZ2ZccJcEMP4y75UqP/zC8uM9U8aez6jqj94Z v/SIbr2KPjozFGiP+/NcV3bd9eUC58lesCUqkQ2GzbEzHOR7opIPvIWZLYayOsdZQzS2h3O7 BcfIvQL9oFBec6pkLhK+a/fLUZZDyrM9OnFBz+rT6OH0nT5TpALAum20q8jcVrvWDbGs6Xuw NQpVEfGUlNXiDDlzfyTfHcQUudHjQPIxdczkMSrMPRGt5pJM0SbvV3nhCO/+vcsMaStOIYOl 1lH88aOWbPFagZH+FgXjM7IRxNHzOxeyVpL5PGiI8/Y4j8GXsKqtw29G28yi0ozy59po6nyv qn+H07KOASZwuxjpnNDDLy3Y7xfAM8MacWvcIfl2AN/iI8pZtyuOVDKb9fboQMKjeVgckYDE hTObT7z2N26xfDZy0V7Bp9ey/Kyg48tmn0qE/C2Y7iqNFjCWN9hmn6Lx7DSJB9mVmP97T6Ot np8ZBFr/HPnnmLx4O1G/1X+iThBc9QVxvJtEjtN46qzSMoUAEQEAAcLBXwQYAQgACQUCSwD4 gAIbDAAKCRBq4d8NYI8i3Ez3D/9+d9MrNvCsz1sPii4EfbOxz0ZXUpCSCKUSuT+e2GzGnyzP w6TBWS4YrSBTCD2nDb3vKWVUhyHDpFDWw9LofPVo/BM+RLoDkmElzvoWnKGyKElB7bHmXqBm v6vATL5W0Efqz2xf8qwRDsrTrrVWpGuLXlQWYFM28OrGCmh7CraiLhjqNqoErx2ZOl4LPtL1 dQ60EPB33in9o2RdZTZYzpHbnPBNEHQWev1+W3Jau8NZlMyV9+HD6G48pIyLhKsaeHroqpwI n4ZUdM3oAdnXWkMKYjIsGH6A7iGJ7T/T40A12T56/fhh5ifhXMQFTzkRAGYg3/59nrzN8VB7 RZa7jfQKdDwvqVUQLlf8lz6qRFZlQb77rilXTSDPyArfLsFv7ZswPYLEh70foOnPXXxiqSDq 1Jd5vHK52Kfjfl9q1Dq7bxpt1P73Ic4c3kA2igEHdofdmxJ0JSkqrM75hVmJ+pnmKuCQ7VQE O3wDGd3vglbpu4x9kHwtmfxDSC5fNFHINZNJRSa3v/hfWwvCjoGdqlxQKjWsfegabvy9YGtU S6V0ntt3UJ787E1FgiLvuo4mDAyW02V6xfBcE8cGjN1FzAU6MzUjpwqTXYqY4GtCOhA6+ZeI Rb5bzbPbz6dBg+LEkC6mLCYy2oE2ORS5zI5dlCZxOQLwwJ4IL/doZFzaKCAljQ== In-Reply-To: <a70a765d58a52f5642bf005cf2b081ce05147910.camel@feldspaten.org> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------eKUd2FLdiwdB7NKCgWOYoEdG" X-Debian-User: biebl This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------eKUd2FLdiwdB7NKCgWOYoEdG Content-Type: multipart/mixed; boundary="------------NzBpHsEV9O246Szy7fdgQtVP"; protected-headers="v1" From: Michael Biebl <biebl@debian.org> To: 1006544-done@bugs.debian.org, Felix Niederwanger <felix@feldspaten.org> Message-ID: <b54e69c7-47dc-4dc9-a5e3-9bd65211c17d@debian.org> Subject: Re: firewall-cmd times out with large blocklists References: <a70a765d58a52f5642bf005cf2b081ce05147910.camel@feldspaten.org> <a70a765d58a52f5642bf005cf2b081ce05147910.camel@feldspaten.org> In-Reply-To: <a70a765d58a52f5642bf005cf2b081ce05147910.camel@feldspaten.org> --------------NzBpHsEV9O246Szy7fdgQtVP Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 VmVyc2lvbjogMi40LjEtMQ0KDQoNClRoaXMgc2hvdWxkIGJlIGZpeGVkIGJ5IGh0dHBzOi8v Z2l0aHViLmNvbS9maXJld2FsbGQvZmlyZXdhbGxkL3B1bGwvMTU0NCANCndoaWNoIGlzIHBh cnQgb2YgdjIuNC4xDQoNClJlZ2FyZHMsDQpNaWNoYWVsDQoNCgkNCk9uIFN1biwgMjcgRmVi IDIwMjIgMTE6NTY6MDkgKzAxMDAgRmVsaXggTmllZGVyd2FuZ2VyIA0KPGZlbGl4QGZlbGRz cGF0ZW4ub3JnPiB3cm90ZToNCj4gUGFja2FnZTogZmlyZXdhbGxkDQo+IFZlcnNpb246IDAu OS4zLTINCj4gDQo+ICMjIE9ic2VydmF0aW9uDQo+IA0KPiBJJ20gbm90aWNpbmcgdGhhdCBg ZmlyZXdhbGxkLWNtZCAtLXJlbG9hZGAgY3Jhc2hlcyB3aGVuIGl0IGhhcyB0byBkZWFsDQo+ IHdpdGggYSBsYXJnZSBkcm9wLnhtbCBmaWxlLCBhcyBzaG93biBoZXJlOg0KPiANCj4gcm9v dEBkZWJpYW46L2V0Yy9maXJld2FsbGQvem9uZXMjIHRpbWUgZmlyZXdhbGwtY21kIC0tDQo+ IHJlbG9hZCAgICAgICAgICAgICAgICAgICANCj4gRVJST1I6ZGJ1cy5wcm94aWVzOkludHJv c3BlY3QgZXJyb3Igb24NCj4gOjEuMjgwODQ6L29yZy9mZWRvcmFwcm9qZWN0L0ZpcmV3YWxs RDE6IGRidXMuZXhjZXB0aW9ucy5EQnVzRXhjZXB0aW9uOg0KPiBvcmcuZnJlZWRlc2t0b3Au REJ1cy5FcnJvci5Ob1JlcGx5OiBEaWQgbm90IHJlY2VpdmUgYSByZXBseS4gUG9zc2libGUN Cj4gY2F1c2VzIGluY2x1ZGU6IHRoZSByZW1vdGUgYXBwbGljYXQNCj4gaW9uIGRpZCBub3Qg c2VuZCBhIHJlcGx5LCB0aGUgbWVzc2FnZSBidXMgc2VjdXJpdHkgcG9saWN5IGJsb2NrZWQg dGhlDQo+IHJlcGx5LCB0aGUgcmVwbHkgdGltZW91dCBleHBpcmVkLCBvciB0aGUgbmV0d29y ayBjb25uZWN0aW9uIHdhcyBicm9rZW4uDQo+IEVycm9yOiBNZXNzYWdlIHJlY2lwaWVudCBk aXNjb25uZWN0ZWQgZnJvbSBtZXNzYWdlIGJ1cyB3aXRob3V0DQo+IHJlcGx5aW5nICAgICAg ICAgICAgICANCj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICANCj4gcmVhbCAgICAxNW0yLjYzM3MNCj4gdXNlciAgICAwbTAuMjczcw0K PiBzeXMgICAgIDBtMC4wNDVzDQo+IA0KPiANCj4gcm9vdEBkZWJpYW46L2V0Yy9maXJld2Fs bGQvem9uZXMjIHN5c3RlbWN0bCBzdGF0dXMgZmlyZXdhbGxkDQo+IOKXjyBmaXJld2FsbGQu c2VydmljZSAtIGZpcmV3YWxsZCAtIGR5bmFtaWMgZmlyZXdhbGwgZGFlbW9uICAgICAgIA0K PiAgICAgIExvYWRlZDogbG9hZGVkICgvbGliL3N5c3RlbWQvc3lzdGVtL2ZpcmV3YWxsZC5z ZXJ2aWNlOyBlbmFibGVkOw0KPiB2ZW5kb3IgcHJlc2V0OiBlbmFibGVkKQ0KPiAgICAgIEFj dGl2ZTogZmFpbGVkIChSZXN1bHQ6IHNpZ25hbCkgc2luY2UgU3VuIDIwMjItMDItMjcgMTA6 NDY6NTcgQ0VUOw0KPiAyN21pbg0KPiBhZ28gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KPiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICANCj4gICAgICAgIERvY3M6IG1hbjpmaXJld2FsbGQoMSkNCj4gICAgIFByb2Nlc3M6IDMz NzI0IEV4ZWNTdGFydD0vdXNyL3NiaW4vZmlyZXdhbGxkIC0tbm9mb3JrIC0tbm9waWQNCj4g KGNvZGU9a2lsbGVkLCBzaWduYWw9S0lMTCkgIA0KPiAgICBNYWluIFBJRDogMzM3MjQgKGNv ZGU9a2lsbGVkLCBzaWduYWw9S0lMTCkNCj4gICAgICAgICBDUFU6IDE1bWluDQo+IDIwLjMz NnMgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgDQo+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgDQo+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KPiANCj4gRmViIDI3IDEw OjMxOjM0IGRlYmlhbiBzeXN0ZW1kWzFdOiBTdGFydGluZyBmaXJld2FsbGQgLSBkeW5hbWlj DQo+IGZpcmV3YWxsIGRhZW1vbi4uLg0KPiBGZWIgMjcgMTA6MzE6MzUgZGViaWFuIHN5c3Rl bWRbMV06IFN0YXJ0ZWQgZmlyZXdhbGxkIC0gZHluYW1pYyBmaXJld2FsbA0KPiBkYWVtb24u DQo+ICANCj4gRmViIDI3IDEwOjQ2OjU3IGRlYmlhbiBzeXN0ZW1kWzFdOiBmaXJld2FsbGQu c2VydmljZTogTWFpbiBwcm9jZXNzDQo+IGV4aXRlZCwgY29kZT1raWxsZWQsIHN0YXR1cz05 L0tJTEwNCj4gRmViIDI3IDEwOjQ2OjU3IGRlYmlhbiBzeXN0ZW1kWzFdOiBmaXJld2FsbGQu c2VydmljZTogRmFpbGVkIHdpdGgNCj4gcmVzdWx0ICdzaWduYWwnLg0KPiBGZWIgMjcgMTA6 NDY6NTcgZGViaWFuIHN5c3RlbWRbMV06IGZpcmV3YWxsZC5zZXJ2aWNlOiBDb25zdW1lZCAx NW1pbg0KPiAyMC4zMzZzIENQVSB0aW1lLg0KPiANCj4gDQo+ICMjIFJlcHJvZHVjZXINCj4g DQo+IEZpbmQgYXR0YWNoZWQgdG8gdGhpcyBlbWFpbCBteSBkcm9wLnhtbCBsaXN0LiBJIHRl c3RlZCB0aGlzIGJ1ZyBpbiBhDQo+IGZyZXNoIFZNIHJ1bm5pbmcgRGViaWFuIDEwIHdpdGgg YWxsIGluc3RhbGxlZCB1cGRhdGVzLg0KPiANCj4gKiBQdXQgYXR0YWNoZWQgZHJvcC54bWwg aW50byAvZXRjL2ZpcmV3YWxsZC96b25lcy9kcm9wLnhtbA0K --------------NzBpHsEV9O246Szy7fdgQtVP-- --------------eKUd2FLdiwdB7NKCgWOYoEdG Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEECbOsLssWnJBDRcxUauHfDWCPItwFAmn1AksFAwAAAAAACgkQauHfDWCPItwH 3A/+OrP9euMHJsyfucqCKJxGWvcEjnlgPxgjJ6rn37kYSrzW/aF7xhKuK6huS65fGIyuW4rTq1JZ SRiivGBmZ983/mSjSd3Zb06VjkvgZmt1PSNw8vk31MOdIzBP6zxLGOSc7INI9dldbx+yr9+YD8m1 RZ3QAPAEcwkSYpHSOfDpfuLvGPHcxCm1zSO2pJPsojMMUm1VmE8/GMDD/ANOOV34BhPdiDbe13dC O476riWT/SF2+MdPPJ64O2O1dFJqEzNmMzUYofd37Xgzysg8NXx7o4pYqzdHzWIXvsq7WIuPZq+M ktqocC712dB6uYbIhHWu4FQK6K9w422WTxtvDWu2tmFxaB/nGMPFIOwXXPTpgQZUK1Ofpwf971Mz gAcdWp83dJMvctlZsW/dX6iJlhBzwegf+jKD01vN08gvRPJl1syBRmewE5b+5+s4dPG6R0NepeBg CapgxeaIdHZJn4rp3HpTRCe2e1K6OVpyxMRLyAS8fLc+Jb+UxHMk7YKrksYdPbUojGYJzbQIHCK0 9D0gM+nywXvF0YvhPNPwHVLphnB6GnH0fGD9b2IOjb0LQfZliQU2B/e6xNi3yMw75akaoF8/fhiE AlUuUkb/vFuBdjjh1MqAEu+wxWjF+nCybcWoLz+vRM8Z1pEOcKIO2VinjE/m6i7WtzB6x6iDvuSO Xkc= =mDnB -----END PGP SIGNATURE----- --------------eKUd2FLdiwdB7NKCgWOYoEdG-- ]