Thanks, that helped a lot! The ipset binary doesn't handle different sets
in a single restore file. I'll fix it in the next days.
Interesting! The file I had with the 3 hash:net sets in it seems to be
restored OK without any problems after applying the patch I've got from
you yesterday (the sets I enclosed in the post you quoted were from a
different file though). The problematic statements seem to be bitmap
sets (bitmap:ip as well as bitmap:port)- it also looked to be choking on
IP addresses specified as cidr (i.e. x.x.x.x/x). Anyway, let me know if
you need anything else from me.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html