Re: [ipset] Minor non-blocking "sleep" bugs

["Ismaël BALLO" <isma.ballo@gmail.com>]

Jozsef Kadlecsik a écrit :
> Hi,
>
> On Thu, 29 Mar 2007, Ismaël BALLO wrote:
>
>> The compilation fails unless you put
>> u_int32_t  min_ip, max_ip; (instead of  __be32 )
>> in  KERNEL_DIR/ include/linux/netfilter_ipv4/ipt_iprange.h
>
> That's an independent problem, not related to ipset ;-).
Ok.
>
>> When I want to flush and delete all rules.
>> (after ipset -U :all: :all: ; ipset -F ; ipset -X and iptables -D <on
>> appropriate rules using sets >)
>>
>> Sometimes, references stays on some sets.
>
> The order is important: you cannot destroy a set if you haven't 
> deleted previously the iptables rule referencing the set.
>
Sorru,  you're right.( I've written too quick ..)
But the problem is still there

 1 - iptables -D <on all appropriate rules using sets > ...
 2 - ipset -U :all: :all: ; ipset -F ; ipset -X

Sometimes, there still exists references.
How can we see them ?Is there a way to flush them ?
> Best regards,
> Jozsef
> -
> E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
> PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
> Address : KFKI Research Institute for Particle and Nuclear Physics
>           H-1525 Budapest 114, POB. 49, Hungary