On Mon, 5 Mar 2018, Akshat Kakkar wrote: > > What is your architecture? > Its a 4.4.82 64 bit kernel What I meant is your hardware architecture, i.e. "uname -a". But I suppose it's x86_64. > and my setup has only 2 machines ... one laptop(IP:192.168.100.100) > and other this linux machine (IP:192.168.100.1). > > I have already taken sufficient time of yours, you just plz reply that > are you able to find an iptable rule hit with ipset having entry > 0.0.0.0/0,eth0. If you are able to, then I will try doing a fresh > installation of everything. However, cause of issue will remain unknown. Yes, in my test environment the rule is matched. But it'd be really strange and definitely not normal that a reinstall is required... root@a# ipset v ipset v6.35, protocol version: 6 root@a# ipset l Name: test Type: hash:net,iface Revision: 6 Header: family inet hashsize 1024 maxelem 65536 Size in memory: 536 References: 0 Number of entries: 1 Members: 0.0.0.0/0,eth0 root@a# iptables-save -t filter -c # Generated by iptables-save v1.4.21 on Mon Mar 5 20:07:28 2018 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] [0:0] -A INPUT -m set --match-set test src,src -j ACCEPT COMMIT # Completed on Mon Mar 5 20:02:50 2018 "ping -c 1 a" root@a# iptables-save -t filter -c # Generated by iptables-save v1.4.21 on Mon Mar 5 20:07:32 2018 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [1:84] [1:84] -A INPUT -m set --match-set test src,src -j ACCEPT COMMIT # Completed on Mon Mar 5 20:07:32 2018 Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html