On 03/30/2017 11:04 AM, Norman Henderson wrote:
> Thanks, both of you. The possibly significant difference in ipset list 
> is that I have Revision: 6 versus 5. (ipset -v gives v6.29, protocol 
> version: 6)


here, it's

        ipset -v
                ipset v6.32, protocol version: 6

as well


> The output from shorewall show capabilities |grep -i ipset is the same 
> as the other poster cited:
>     Ipset Match Counters (IPSET_MATCH_COUNTERS): Available
>     Ipset Match (IPSET_MATCH): Available
>     Ipset Match Nomatch (IPSET_MATCH_NOMATCH): Available
>     ipset V5 (IPSET_V5): Available
> 
> Is there something going on here related to the ipset revision number? 
> If so, how to fix it? ipset has been at v.6.x for years...
> 

And what's in your `capabilities` file for the FW you're compiling?

Here,

        grep -i ipset ./capabilities
                IPSET_MATCH_COUNTERS=Yes
                IPSET_MATCH_NOMATCH=Yes
                IPSET_MATCH=Yes
                IPSET_V5=Yes
                OLD_IPSET_MATCH=


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to