libxt_SET.c requires IPSET_INVALID_ID, but this constant has moved into a #ifdef __KERNEL__ section lately and is thus absent from userspace. (In linux-kernel/include/linux/netfilter/ipset/ip_set.h.) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html