On 02/06/2018 12:53 PM, Tom Eastep wrote: >> >> Where's my mistake? >> > > Try this: > > iptables -N foo > iptables -A foo -m set --set allowed_labs dst -j ACCEPT > > What is the result? >
If the second command fails, try this:
iptables -A foo -m set --match-set allowed_labs dst -j ACCEPT
If that also fails, then you are missing IPSET_MATCH support in your
kernel/iptables.
-Tom
--
Tom Eastep \ Q: What do you get when you cross a mobster with
Shoreline, \ an international standard?
Washington, USA \ A: Someone who makes you an offer you can't
http://shorewall.org \ understand
\_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
