Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Eliezer Croitoru <eliezer@ngtech.co.il>
To: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Cc: "\"Csordás Csaba Ifj.\"" <cscsordas@gmail.com>,
	netfilter@vger.kernel.org
Subject: Re: Status of iptables target support in ipset
Date: Wed, 07 Nov 2012 23:07:41 +0200	[thread overview]
Message-ID: <509ACD9D.4060102@ngtech.co.il> (raw)
In-Reply-To: <alpine.DEB.2.00.1211072149480.3544@blackhole.kfki.hu>

On 11/7/2012 10:51 PM, Jozsef Kadlecsik wrote:
> No, the idea is to add targets per set entry. I.e.
>
> ipset add foo 192.168.1.1 -t filter -A FORWARD -j LOG --log-prefix foo
> ipset add foo 192.168.1.2 -t filter -A FORWARD -j LOG --log-prefix bar
>
> Best regards,
> Jozsef
hoo now I understand.
but ipset was meant to be a "set match", no?
In iptables it's a module that match a rule if it matches a set...
it's kind of confusing from iptables idea point of view for me.

Regards,
Eliezer

-- 
Eliezer Croitoru
https://www1.ngtech.co.il
IT consulting for Nonprofit organizations
eliezer <at> ngtech.co.il

  reply	other threads:[~2012-11-07 21:07 UTC|newest]

Thread overview: 9+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2012-10-26 13:58 Status of iptables target support in ipset Csordás Csaba Ifj.
2012-10-27  7:26 ` Jozsef Kadlecsik
2012-11-07 10:03 ` Eliezer Croitoru
2012-11-07 20:51   ` Jozsef Kadlecsik
2012-11-07 21:07     ` Eliezer Croitoru [this message]
2012-11-07 21:42       ` Jozsef Kadlecsik
2012-11-08  0:47         ` Sven-Haegar Koch
2012-11-12 12:27 ` Ed W
2012-11-12 15:18   ` Jozsef Kadlecsik

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=509ACD9D.4060102@ngtech.co.il \
    --to=eliezer@ngtech.co.il \
    --cc=cscsordas@gmail.com \
    --cc=kadlec@blackhole.kfki.hu \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox