>> In other words: >> 1. For hash:net,iface the possible options should be 'in', 'out', 'src' and >> 'dst'; and >> 2. For all other sets, including list:set the only available options should be >> 'src' and 'dst'. Have I understood this correctly then? > > Yes, that looks OK. I'll submit an alternative version of the patches soon, with the above restrictions applied to see if that makes you happy. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html