ipset looks to be a very useful tool for substantial speedups in any iptables firewall that does a decent amount of netblock filtering - and also supports dynamic changes of the tables in a reasonably efficient way. A) Is ipset turned on the fedora kernel ? B) Which package has the ipset user space tool Thanks kindly g