These are the userspace changes to add the ability to specify a netmask or wildcard mask for the set during creation instead of just a cidr value. Example usage: Legacy behavior: ipset create foo hash:ip family inet6 netmask 64 New netmask support (equivalent to legacy example): ipset create foo hash:ip family inet6 netmask ffff:ffff:ffff:ffff:: New wildcard mask support: ipset create foo hash:ip family inet6 netmask ffff:ffff:ffff:0:0:ffff:ffff:ffff The 3 mask types are supported for ipv4 sets as well. Josh Hunt (5): ipset: netmask: expand to support cidr and full mask ipset: hash:ip: add support for new netmask types ipset: hash:ipport: netmask support hash:ip: add new netmask support to man page hash:ip,port: add netmask support to man page include/libipset/data.h | 5 +- include/libipset/linux_ip_set.h | 5 ++ include/libipset/print.h | 3 + lib/data.c | 25 +++++- lib/debug.c | 1 + lib/ipset_hash_ip.c | 166 ++++++++++++++++++++++++++++++++++ lib/ipset_hash_ipport.c | 194 ++++++++++++++++++++++++++++++++++++++++ lib/parse.c | 68 ++++++++++++-- lib/print.c | 39 +++++++- lib/session.c | 8 ++ src/ipset.8 | 90 +++++++++++++++++-- 11 files changed, 583 insertions(+), 21 deletions(-) -- 1.9.1 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html