From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mr Dash Four Subject: Re: [PATCH 0/3] ipset: change 'iface' part in hash:net,iface set Date: Sun, 08 Jul 2012 20:03:25 +0100 Message-ID: <4FF9D97D.7040309@googlemail.com> References: <4FF736FE.8030109@googlemail.com> <4FF74868.3070303@googlemail.com> <4FF74D5C.6060909@googlemail.com> <4FF752F0.3010007@googlemail.com> <4FF765E7.6020809@googlemail.com> <4FF9852C.7080201@googlemail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Netfilter Core Team , Pablo Neira Ayuso , Patrick McHardy To: Jozsef Kadlecsik Return-path: Received: from mail-wg0-f44.google.com ([74.125.82.44]:35010 "EHLO mail-wg0-f44.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751916Ab2GHTDf (ORCPT ); Sun, 8 Jul 2012 15:03:35 -0400 Received: by wgbdr13 with SMTP id dr13so10780858wgb.1 for ; Sun, 08 Jul 2012 12:03:34 -0700 (PDT) In-Reply-To: Sender: netfilter-devel-owner@vger.kernel.org List-ID: > I repeat it as many times it's required. The rules > > iptables -A INPUT -m set --match-set list1 src,src -j ACCEPT > iptables -A INPUT -m set --match-set list1 src,in -j ACCEPT > > would produce different results and that's unacceptable. > Why not?