use ipset improve performace

iptables.sh

@@ -1,8 +1,3 @@
-iptables -D FORWARD -j ANTI-PORN
-iptables -F ANTI-PORN
-iptables -X ANTI-PORN
-
-iptables -N ANTI-PORN
 
 echo > /tmp/ips
 
@@ -17,7 +12,12 @@ while read -r line; do
   block $line &
 done < /tmp/domains.txt
 
-cat /tmp/ips | sort | uniq | xargs -I % iptables -A ANTI-PORN -d % -j DROP
+sleep 2
+
+iptables -D FORWARD -m set --match-set porn-ipset src -j DROP
+ipset destroy porn-ipset
 
-iptables -I FORWARD 1 -j ANTI-PORN
+cat /tmp/ips | sort | uniq | wc -l | xargs -I % ipset create porn-ipset hash:ip maxelem %
+cat /tmp/ips | sort | uniq | xargs -I % ipset add porn-ipset %
 
+iptables -I FORWARD 1 -m set --match-set porn-ipset src -j DROP