On 03/30/2017 11:04 AM, Norman Henderson wrote: > Thanks, both of you. The possibly significant difference in ipset list > is that I have Revision: 6 versus 5. (ipset -v gives v6.29, protocol > version: 6)
here, it's ipset -v ipset v6.32, protocol version: 6 as well > The output from shorewall show capabilities |grep -i ipset is the same > as the other poster cited: > Ipset Match Counters (IPSET_MATCH_COUNTERS): Available > Ipset Match (IPSET_MATCH): Available > Ipset Match Nomatch (IPSET_MATCH_NOMATCH): Available > ipset V5 (IPSET_V5): Available > > Is there something going on here related to the ipset revision number? > If so, how to fix it? ipset has been at v.6.x for years... > And what's in your `capabilities` file for the FW you're compiling? Here, grep -i ipset ./capabilities IPSET_MATCH_COUNTERS=Yes IPSET_MATCH_NOMATCH=Yes IPSET_MATCH=Yes IPSET_V5=Yes OLD_IPSET_MATCH= ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users