redjack/ipset — pull request #33 by johnzachary (2012-04-24 14:51:48+00:00)
Title: IP address and network removal operations for libipset and ipsetbuild

commit 2da77

Enabled remove operations in IP list input files for ipsetbuild

* Input files for ipsetbuild can specify addresses and networks to remove
by using the syntax `!

` or `!

`.

* Three levels of verbosity are supported in ipsetbuild:
1. -q (level -1) suppresses output except error messages on malformed input
2. default (level 0) displays warnings, alerts, and errors on malformed input
3. -v (level 1) displays all messages, summary information, and other messages

commit a7fbc

IP set feature to remove IP addresses and networks from an IP set

* Implemented `ipset_ip_remove()` and `ipset_ip_remove_network()` functions.
This required two new function templates in inspection-template.c.in, which
pass `0` values to `ipset_node_insert`.

* Added tests cases in `test-ipset.c` to test remove functionality.