From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mr Dash Four Subject: Re: ipset and interfaces Date: Tue, 24 May 2011 13:43:07 +0100 Message-ID: <4DDBA7DB.9010102@googlemail.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Oskar Berggren , netfilter-devel@vger.kernel.org To: Jozsef Kadlecsik Return-path: Received: from mail-ww0-f42.google.com ([74.125.82.42]:49049 "EHLO mail-ww0-f42.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755230Ab1EXMnL (ORCPT ); Tue, 24 May 2011 08:43:11 -0400 Received: by wwk4 with SMTP id 4so2398277wwk.1 for ; Tue, 24 May 2011 05:43:10 -0700 (PDT) In-Reply-To: Sender: netfilter-devel-owner@vger.kernel.org List-ID: > So it looks like a valid case, for a new set type with interfaces and IP > addresses/networks ;-) I'll work on it. > Keep in mind though, that interfaces can be specified in "-i" as well as "-o" (i.e. input as well as output) - so you need to create some sort of matching mechanism which distinguishes between these. Obviously this is currently resolved in iptables with the "-i" and -"o" options respectively.