Entries in the blocklist

I was recently reviewing lists available in ipset, and there are a few lists implemented by cPFence:

Name: cPFence-blocklist

Name: cPFence-whitelist

Name: cPFence-ipv6-blocklist

The whitelists and the ipv6 ones are empty for now, but the regular ipv4 blocklist had 377449 entries in total. Those entries have no timeout set.

Name: cPFence-blocklist

Type: hash:net

Revision: 7

Size in memory: 12041376

References: 2

Number of entries: 377449

Are these entries permanent by design? Or is it another procedure that removes them after some time?

I think whitelists should be permanent, but I'm not sure about blacklists.

Yes, they are permanent by design and fully managed by cPFence. The entries are updated continuously with new IPs added and others removed.

Any manual changes you make to the ipsets won’t persist, as cPFence will overwrite them. For any needed changes, use only the CLI or WebUI tools.