Commit 8cc4ccf58379 ("ipset: Allow matching on destination MAC address for mac and ipmac sets"), ipset.git commit 1543514c46a7, properly allows destination matching for hash:mac set types, but missed to remove the previous restriction for type hash:ip,mac and introduced an obvious mistake in both bitmap:ip,mac and hash:ip,mac. Drop the left-over check and correct the mistake, to fix the issue reported by Chen Yi. Stefano Brivio (2): ipset: Actually allow destination MAC address for hash:ip,mac sets too ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets kernel/net/netfilter/ipset/ip_set_bitmap_ipmac.c | 2 +- kernel/net/netfilter/ipset/ip_set_hash_ipmac.c | 6 +----- 2 files changed, 2 insertions(+), 6 deletions(-) -- 2.20.1