summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>2012-09-10 21:22:23 +0200
committerJozsef Kadlecsik <kadlec@blackhole.kfki.hu>2012-09-10 21:22:23 +0200
commitb60b8e0e3a1dfbe664d693512d978e2cd1880704 (patch)
tree604298698f667ef0ed2ea01f8cb5c513b6f27b62 /src
parent042c9bfdea212750a86601007a589f4df9fa3a5e (diff)
Add /0 network support to hash:net,iface type
Now it is possible to setup a single hash:net,iface type of set and a single ip6?tables match which covers all egress/ingress filtering.
Diffstat (limited to 'src')
-rw-r--r--src/ipset.83
1 files changed, 1 insertions, 2 deletions
diff --git a/src/ipset.8 b/src/ipset.8
index bbad680..3a5a5db 100644
--- a/src/ipset.8
+++ b/src/ipset.8
@@ -751,8 +751,7 @@ ipset add foo 192.168.2,25,10.1.0.0/16
ipset test foo 192.168.1,80.10.0.0/24
.SS hash:net,iface
The \fBhash:net,iface\fR set type uses a hash to store different sized IP network
-address and interface name pairs. Network address with zero prefix size is not
-accepted.
+address and interface name pairs.
.PP
\fICREATE\-OPTIONS\fR := [ \fBfamily\fR { \fBinet\fR | \fBinet6\fR } ] | [ \fBhashsize\fR \fIvalue\fR ] [ \fBmaxelem\fR \fIvalue\fR ] [ \fBtimeout\fR \fIvalue\fR ]
.PP