diff options
| author | Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | 2012-09-10 21:22:23 +0200 |
|---|---|---|
| committer | Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | 2012-09-10 21:22:23 +0200 |
| commit | b60b8e0e3a1dfbe664d693512d978e2cd1880704 (patch) | |
| tree | 604298698f667ef0ed2ea01f8cb5c513b6f27b62 /src | |
| parent | 042c9bfdea212750a86601007a589f4df9fa3a5e (diff) | |
| download | ipset-b60b8e0e3a1dfbe664d693512d978e2cd1880704.tar.gz | |
Add /0 network support to hash:net,iface type
Now it is possible to setup a single hash:net,iface type of set and
a single ip6?tables match which covers all egress/ingress filtering.
Diffstat (limited to 'src')
| -rw-r--r-- | src/ipset.8 | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/src/ipset.8 b/src/ipset.8 index bbad680..3a5a5db 100644 --- a/src/ipset.8 +++ b/src/ipset.8 @@ -751,8 +751,7 @@ ipset add foo 192.168.2,25,10.1.0.0/16 ipset test foo 192.168.1,80.10.0.0/24 .SS hash:net,iface The \fBhash:net,iface\fR set type uses a hash to store different sized IP network -address and interface name pairs. Network address with zero prefix size is not -accepted. +address and interface name pairs. .PP \fICREATE\-OPTIONS\fR := [ \fBfamily\fR { \fBinet\fR | \fBinet6\fR } ] | [ \fBhashsize\fR \fIvalue\fR ] [ \fBmaxelem\fR \fIvalue\fR ] [ \fBtimeout\fR \fIvalue\fR ] .PP |