Please keep it onlist. FYI, HTML posts to ML make it difficult to read. Your output, compared to mine, is short, and lacking detail
Here, shorewall version 4.6.3.4 ipset -V ipset v6.23, protocol version: 6 ipset --help | grep -P "hash:ip" hash:ip,port,net 7 skbinfo support hash:ip,port,net 6 forceadd support hash:ip,port,net 5 comment support hash:ip,port,net 4 counters support hash:ip,port,net 3 nomatch flag support hash:ip,port,net 2 Add/del range support hash:ip,port,net 1 SCTP and UDPLITE support hash:ip,port,ip 5 skbinfo support hash:ip,port,ip 4 forceadd support hash:ip,port,ip 3 comment support hash:ip,port,ip 2 counters support hash:ip,port,ip 1 SCTP and UDPLITE support hash:ip,mark 2 sbkinfo support hash:ip,mark 1 forceadd support hash:ip,mark 0 initial revision hash:ip,port 5 skbinfo support hash:ip,port 4 forceadd support hash:ip,port 3 comment support hash:ip,port 2 counters support hash:ip,port 1 SCTP and UDPLITE support hash:ip 4 skbinfo support hash:ip 3 forceadd support hash:ip 2 comment support hash:ip 1 counters support hash:ip 0 Initial revision 1st/only guess, your ipset version is missing a needed feature. Checking capabilities here, shorewall show capabilities | grep -i ipset Ipset Match Counters (IPSET_MATCH_COUNTERS): Available Ipset Match (IPSET_MATCH): Available Ipset Match Nomatch (IPSET_MATCH_NOMATCH): Available ipset V5 (IPSET_V5): Available Compare with yours. I do not know if these are checked for AND required. ------------------------------------------------------------------------------ Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users