[root@test1 ~]# ipset n test hash:net family inet timeout 0 [root@test1 ~]# ipset a test 10.16.0.0-10.16.255.255 [root@test1 ~]# ipset l test Name: test Type: hash:net Header: family inet hashsize 1024 maxelem 65536 timeout 0 Size in memory: 16832 References: 0 Members: 10.16.0.0/16 timeout 0 [root@test1 ~]# ipset t test 10.16.224.0/24 10.16.224.0/24 is NOT in set test. [root@test1 ~]# ipset t test 10.16.224.1 10.16.224.1 is in set test. That is plainly wrong! -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html