On Thu, 11 Apr 2013, Jimmy Thrasibule wrote: > > On Thu, 11 Apr 2013, Jimmy Thrasibule wrote: > > > > > > Apply two matches: > > > > > > > > -A FORWARD -m set --match-set mynets src -m set --match-set mynets dst ... > > > > > > Ah, > > > > > > That's the first thing I tried but as I didn't load the module twice it > > > wouldn't work. > > > > Sorry, I don't understand. Why would you need to load the module twice? > > There's no need to load the module at all. > > I just mean that I tried something like: > > -m set --match-set mynets src --match-set mynets dst > > And I got an error saying that --match-set can only be used once. And by > module I was more talking about the match option -m until now I was > thinking that calling it only once would be enough for the whole rule. Then your *iptables* version is too old. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
