Re: How many IP's can a group have?

 posted 2 links, the 1st just containing IP address ranges per country, the 2nd a script to add them one by one in seperate iptables rules.   That's definitely not the way to do it, since it doesn't use address group/ipset.

 is using address groups, which is way faster and the way to do it.  For bogons with limited number of lines, this is feasible, but adding a complete country in a vyatta config group like this is time consuming....even for a script.

The thread I referred to in post 5 uses a way faster method.  The vyatta config holds an empty group.  The script uses ipset to fill it with members.