>From the ipset "tips & examples" , If you want a fixed size iphash type of set, then define it with zero valued resize parameter: ipset -N foo iphash --resize 0 Would this be used for a constant/unchanging ipset, e.g. containing 25 IPs that won't be addded to or changed dynamically? Similar to OpenBSD's pf "const" table construct, table <XXX> const { ip1, ip2, ..., ipN } ? Also, Does hashsize literally correspond to # of entries? So, 25 entries would need only hashsize=25? Thanks. --JC -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html