On Thu, 2 Aug 2012, Jozsef Kadlecsik wrote: > On Thu, 2 Aug 2012, Nikolai Lusan wrote: > > > After receiving advice that multiple set matching was supported I have > > written a firewall that uses multiple set matches in a single iptables > > rule only to receive the error message "--match-set can on be used > > once". Is there support for matching against more than one set? Or is it > > possible that this can be done in a future release? > > Which is the iptables version you use? The parser has changed several > times since the multiple same match support had been added, so the feature > might get lost. No, you must use wrong syntax. Matching against multiple sets is supported via multiple matches, i.e. iptables ... -m set --match-set foo src,dst -m set --match-set bar src ... Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
