ipset & iptables

* ipset & iptables
@ 2012-02-01 16:32 Rob Sterenborg (lists)
  2012-02-01 18:52 ` Jozsef Kadlecsik
  0 siblings, 1 reply; 3+ messages in thread
From: Rob Sterenborg (lists) @ 2012-02-01 16:32 UTC (permalink / raw)
  To: netfilter

Hello,

I have problems matching an ipset set using iptables. My configuration
is as follows:

# uname -r
2.6.39.1

# iptables -V
iptables v1.4.12.2

# ipset -V
ipset v6.11, protocol version: 6

The following 3 commands are executed immediately after each other:

# ipset create TEST hash:ip
# ipset add TEST 127.0.0.5
# iptables -A INPUT -m set --match-set TEST src
iptables: No chain/target/match by that name.

# lsmod|grep set
ip_set_hash_net        15884  3 
ip_set_hash_ip         13584  2 
ip_set                 19151  2 ip_set_hash_net,ip_set_hash_ip
nfnetlink               3191  2 nf_conntrack_netlink,ip_set

# ipset list TEST
Name: TEST
Type: hash:ip
Header: family inet hashsize 1024 maxelem 65536 
Size in memory: 8264
References: 0
Members:
127.0.0.5

I don't get it: ipset says the set exists and has a member (if that
matters anything), but iptables doesn't see it. What am I missing?

--
Rob

^ permalink raw reply	[flat|nested] 3+ messages in thread