Hi Pablo, Please consider applying the next patch for the nf-next tree: - Add wildcard support to hash:net,iface which makes possible to match interface prefixes besides complete interfaces names, from Kristian Evensen. Best regards, Jozsef The following changes since commit d5a721c96a4411d3f35545b694fc9794fbbfc98e: atm: remove unneeded semicolon (2019-10-28 16:47:22 -0700) are available in the Git repository at: git://blackhole.kfki.hu/nf-next 2eb06a8c6254dc68 for you to fetch changes up to 2eb06a8c6254dc68b4f8519918e59197758decaf: netfilter: ipset: Add wildcard support to net,iface (2019-11-01 17:19:19 +0100) ---------------------------------------------------------------- Kristian Evensen (1): netfilter: ipset: Add wildcard support to net,iface include/uapi/linux/netfilter/ipset/ip_set.h | 2 ++ net/netfilter/ipset/ip_set_hash_netiface.c | 23 ++++++++++++++++++----- 2 files changed, 20 insertions(+), 5 deletions(-)