'ãã So a few people had been asking on whether ipset 5.x will be bundled along with Xtables-addons. Naturally this is a difficult question because ipset-5 wants a kernel patch. But yes, it is included as of Xt-a 1.32 (just out). It has been augmented to not require the patch anymore, by moving it over from nfnetlink (booo) to genetlink which does not depend on static numbers, though you will need at least Linux 2.6.35 for this GENL variant in both compilation and at runtime. (As such, ipset-5 is deactivated by default in Xt-a 1.32 and needs to be turned on in mconfig.) Xt-a files at the usual place. The plain genl patch to ipset-5 can be found as a commit at git://dev.medozas.de/ipset in the "genl" branch. It has received a run through the testsuite (as far as it went until ospf), and I take that as an indication that proxying the protocol onto genl was successful. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html