The implementation behind ipset looks up the (ipaddr, proto, port) triple in one step. Such packing don't work there.
If that's the case how do you lookup IP address and port ranges then? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
