What is the purpose of IP sets?

Question

Options

• AThey group together IP addresses that are assigned to the same network interfaces.
• BThey group together IP addresses and networks that can be referenced by the network routing
• CThey group together IP addresses that can be referenced by netfilter rules.
• DThey group together IP and MAC addresses used by the neighbors on the local network.
• EThey group together IP addresses and user names that can be referenced from /etc/hosts.allow

• A
  6% (2)
• B
  3% (1)
• C
  91% (32)

Explanation

IP sets are a kernel-level feature (part of the ipset utility) that allow you to create named collections of IP addresses, networks, or ports that can be referenced as a single object in netfilter (iptables/nftables) rules - which is exactly what option C describes. Instead of writing dozens of separate firewall rules, you reference one IP set, making rule management far more efficient.

Why the distractors are wrong:

• A is wrong because IP sets are not tied to network interfaces - they're independent collections used for filtering, not interface assignment.
• B is wrong because routing is handled by the routing table (ip route), not IP sets; sets operate at the packet filtering layer, not the routing layer.
• D is wrong because neighbor/ARP information (IP-to-MAC mappings) is managed by the neighbor cache (ip neigh), not IP sets.
• E is wrong because /etc/hosts.allow is part of TCP Wrappers, which uses its own access control syntax - IP sets have no relationship to that file.

Memory tip: Think of IP sets as a "contact group" for your firewall - just as a contact group lets you message many people at once, an IP set lets one iptables/nftables rule match many addresses at once. The key word is netfilter - IP sets live in the kernel's packet filtering subsystem.

No community discussion yet for this question.