On Sun, 8 Jul 2012, Mr Dash Four wrote: > > "src,src" != "src,dst", but > > > > with your patches in some cases > > "src,in" == "src,src" or "src,in" != "src,src" > > > Could you provide me with an example please? I am intrigued! This is ridiculous, as if I haven't provided it countless times: iptables -A INPUT -m set --match-set list1 src,src -j ACCEPT iptables -A INPUT -m set --match-set list1 src,in -j ACCEPT > > > Avoid what exactly? Using 'in' or 'out' in list:set types? > > > > > > > For example. That's a possible solution. > > > So, in other words, what you are actually getting at, is that you wish to > restrict the use of 'in' and 'out' options only for hash:net,iface types > because you are not happy with the use of 'in'/'out' in any other set types, > list:set in particular? Have I understood this correctly then? That's a possible - probably the simplest - solution. It's OK for me. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
