On 03/13/2018 01:36 AM, Fran Fitzpatrick wrote: > Hi all, > > One feature that I've noticed is missing is that there is no > hash:port:hash equivalent in nftables, which I'm starting to think is > quite a big gap. Postscript: If you actually meant "hash:net,port,net" it's one of the express examples at the bottom of the Concatenations page under the "Some ipset types" heading. https://wiki.nftables.org/wiki-nftables/index.php/Concatenations -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html