Hi, The new ipset 7.15 release contains a single fix against the previous version: a condition was wrongly placed in the hash:ip,port,net kernel module. Please upgrade to the new release. Kernel part changes: - netfilter: ipset: Fix maximal range check in hash_ipportnet4_uadt() (Nathan Chancellor) You can download the source code of ipset from: https://ipset.netfilter.org ftp://ftp.netfilter.org/pub/ipset/ git://git.netfilter.org/ipset.git Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences H-1525 Budapest 114, POB. 49, Hungary