Hi! It would be great it this were supported: iifname . oifname vmap { eth1 . eth0 : jump chain1, eth2 . eth0 : jump chain2 } Error: can not use variable sized data types (string) in concat expressions Why iifname rather than iifindex? I would like to test/deploy my ruleset in machines which doesn't have (yet) all the interfaces. Why concat? I would like to map every possible network direction to a custom chain. (dmz->inet, inet->dmz, et al) using a single rule. -- Arturo Borrero González -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html