* ipset - adding two MACs with same IP address
@ 2012-12-28 17:45 Piotr Kaczmarzyk
0 siblings, 0 replies; only message in thread
From: Piotr Kaczmarzyk @ 2012-12-28 17:45 UTC (permalink / raw)
To: netfilter
Hi,
I'd like to create ip set, where some IP addresses have two or more
possible MAC addresses. I.e. I want to replace following iptables entries:
iptables -A FORWARD -s 10.0.0.2 -m mac --mac-source 00:11:22:33:44:55 -j
ACCEPT
iptables -A FORWARD -s 10.0.0.2 -m mac --mac-source 00:22:44:66:88:aa -j
ACCEPT
with someting like:
ipset -A ACCEPTEDMAC "10.0.0.2,00:11:22:33:44:55"
ipset -A ACCEPTEDMAC "10.0.0.2,00:22:44:66:88:aa"
but after second command ipset says:
ipset v6.16.1: Element cannot be added to the set: it's already added
Is there any way to do this with ipset? Or maybe another way to speed up
this filtering?
Best regards,
Piotr
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2012-12-28 17:45 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-12-28 17:45 ipset - adding two MACs with same IP address Piotr Kaczmarzyk
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.