On Mon, 6 May 2013, tian fang wrote: > > > > create SETNAME bitmap:ip range IP/CIDR|FROM-TO > > > > [netmask CIDR] [timeout VALUE] [counters] > > > > > > So the ipset binary does support counters. Then what is the output > > > of "modinfo ip_set_bitmap_ip"? Also, if you had the previous ipset > > > kernel modules loaded in, then just installing them won't unload them. > > > > I successfully built and executed ipset 6.19 ,but when I try to > > run this command, I failed. > > > > iptables -t nat -A POSTROUTING -m set --match-set ipc src,dst -j > > MASQUERADE > > iptables: No chain/target/match by that name. > > > > could you please help me on this ? > > [There's no ipset 6.19 yet.] > > I succeeded after I sudo cp xt_set.ko > /lib/modules/3.5.0-28-generic/kernel/net/netfilter/ . > Thanks for your help. > But I am just alittlebit curious why can't I do it by make install. I suspect your "depmod" utility is not configured to process the /lib/modules/`uname -r`/extra/ directory, in which the modules are installed by the command "make modules_install". It's strange. You're the second reporting such kind of problem. What is your distribution and what's its version? Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html