[prev in list] [next in list] [prev in thread] [next in thread] 

List:       netfilter
Subject:    Re: [ipset] Match both on source AND destination
From:       Jozsef Kadlecsik <kadlec () blackhole ! kfki ! hu>
Date:       2013-04-11 18:07:05
Message-ID: alpine.DEB.2.00.1304112006200.32023 () blackhole ! kfki ! hu
[Download RAW message or body]

On Thu, 11 Apr 2013, Jimmy Thrasibule wrote:

> > On Thu, 11 Apr 2013, Jimmy Thrasibule wrote:
> > 
> > > > Apply two matches:
> > > > 
> > > > -A FORWARD -m set --match-set mynets src -m set --match-set mynets dst ...
> > > 
> > > Ah,
> > > 
> > > That's the first thing I tried but as I didn't load the module twice it
> > > wouldn't work.
> > 
> > Sorry, I don't understand. Why would you need to load the module twice?
> > There's no need to load the module at all.
> 
> I just mean that I tried something like:
> 
> -m set --match-set mynets src --match-set mynets dst
> 
> And I got an error saying that --match-set can only be used once. And by
> module I was more talking about the match option -m until now I was
> thinking that calling it only once would be enough for the whole rule.

Then your *iptables* version is too old.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlecsik.jozsef@wigner.mta.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
[prev in list] [next in list] [prev in thread] [next in thread]