I recently added support for a new hash:ip,net ipset type based largely off the hash:ip,port,net implementation. A git repo with the modifications can be accessed here: https://github.com/dgervais/ipset.git Looking over the recent mailing list history, it looks like work is underway on a hash:net,net implementation that would also be beneficial to the project I am working on. It would serve a very similar need as the hash:ip,net implementation and may even obviate its need. Either way, I figured I would share the contribution in case others could benefit from its inclusion. Thanks for all the great work! -Dave -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html