Re: ipset not completely working in mangle:PREROUTING

Slavko <[email protected]> Tue, 26 May 2026 12:24:42 +0200
Newsgroups gmane.comp.security.firewalls.netfilter.general
Message-ID <[email protected]>
Dňa 26. 5. o 9:51 Jozsef Kadlecsik napísal(a):
>>> On Tue, 26 May 2026, at 1:57 AM, [email protected] wrote:
>>>> iptables v1.8.7 (legacy)
>>>> ipset v6.34, protocol version: 6
> 
> That's pretty old. Still it has no effect on the subject.

I have even older ipset/iptables (v6.32/v1.4.21) on my router and it 
works as expected in manlge's PREROUTING chain:

   16M  975M drlst_drop  all  --  *      *       0.0.0.0/0  0.0.0.0/0 
match-set droplst src

That is only excerpt, it is after accept of ESTABLISHED,RELATED and in 
chain based on input interface...

regards

-- 
Slavko
https://www.slavino.sk/