<html>
    <head>
      <base href="https://bugzilla.netfilter.org/" />
    </head>
    <body><span class="vcard"><a class="email" href="mailto:kadlec@netfilter.org" title="Jozsef Kadlecsik <kadlec@netfilter.org>"> <span class="fn">Jozsef Kadlecsik</span></a>
</span> changed
              <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED INVALID - SET target unreliable in iptables - add does not work as expected"
   href="https://bugzilla.netfilter.org/show_bug.cgi?id=1101">bug 1101</a>
          <br>
             <table border="1" cellspacing="0" cellpadding="8">
          <tr>
            <th>What</th>
            <th>Removed</th>
            <th>Added</th>
          </tr>

         <tr>
           <td style="text-align:right;">Status</td>
           <td>ASSIGNED
           </td>
           <td>RESOLVED
           </td>
         </tr>

         <tr>
           <td style="text-align:right;">Resolution</td>
           <td>---
           </td>
           <td>INVALID
           </td>
         </tr></table>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED INVALID - SET target unreliable in iptables - add does not work as expected"
   href="https://bugzilla.netfilter.org/show_bug.cgi?id=1101#c4">Comment # 4</a>
              on <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED INVALID - SET target unreliable in iptables - add does not work as expected"
   href="https://bugzilla.netfilter.org/show_bug.cgi?id=1101">bug 1101</a>
              from <span class="vcard"><a class="email" href="mailto:kadlec@netfilter.org" title="Jozsef Kadlecsik <kadlec@netfilter.org>"> <span class="fn">Jozsef Kadlecsik</span></a>
</span></b>
        <pre>This is the expected behaviour and documented in the manpage:

"In order to avoid clashes in the hash, a limited number of chaining,
and if that is exhausted, the doubling of the hash size is performed
when adding entries by the ipset command. When entries added by
the SET target of iptables/ip6tables, then the hash size is fixed
and the set won't be duplicated, even if the new entry cannot be
added to the set."

You have to create the set with a proper hashsize parameter if
the elements are added by the SET target.</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are watching all bug changes.</li>
      </ul>
    </body>
</html>