On Thu, 1 Mar 2018, Akshat Kakkar wrote: > >> There is only one rule in my iptables, > >> > >> iptables -A INPUT -m set --match-set foo src,src -j ACCEPT > > > > That's the filter table. What about the other tables? > > nothing in any other table. > raw > mangle > nat > > If entry in ipset is 0.0.0.0/0,eth0 then iptable rule is not matched. > > However, if entry in ipset is 0.0.0.0/1,eth0 and 128.0.0.0/1,eth0, > then iptable rule is matched. What is your architecture? Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
