Is it planned (or already implemented) support for multiple value vmaps? for example {type uid, type ipv4 : verdict} Also, using iptables I am doing something like this -A INPUT -j BLOCK -A BLOCK -m set --match-set ignorelist src -j RETURN -A BLOCK -m set --match-set blocklist src -j DROP ..to make sure ips listed in ignorelist does not get blocked.. How would I do the same using nft? -- Bj(/)rnar -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html