Re: ipset not completely working in mangle:PREROUTING
Jozsef Kadlecsik <[email protected]> Tue, 26 May 2026 09:51:36 +0200 (CEST)
| Newsgroups | gmane.comp.security.firewalls.netfilter.devel,gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <[email protected]> |
Hi, On Mon, 25 May 2026, [email protected] wrote: > On Tue, 26 May 2026 02:57:38 +0100 > "Kerin Millar" <[email protected]> wrote: > >> On Tue, 26 May 2026, at 1:57 AM, [email protected] wrote: >>> iptables v1.8.7 (legacy) >>> ipset v6.34, protocol version: 6 That's pretty old. Still it has no effect on the subject. > OK. So ipset *should* work in mangle:PREROUTING. Yes, but please note: if some data it should match on is missing at that stage/chain (like incoming-outgoing interface), then it "won't work". > Can the same chain name be used simultaneously in multiple tables > (though if not, the pre-defined chains shouldn't work)? No, all tables are independent of each other, including the predefined chains. Best regards, Jozsef