[Bug 1147] iptables rule to match a 'set' shows [unsupported revision]

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1147

--- Comment #3 from anubis at iwwd.com ---
Hi Willem,

Thanks for the update.

The system base is Debian 8.7.1

I'm using a custom kernel which is based on the pure kernel source 4.9.0
patched to include the IMQ driver.

Linux camulus 4.9.0-kustkernel-20170208 #2 SMP Thu Feb 9 00:39:02 AEDT 2017
x86_64 GNU/Linux

The iptables version is "iptables v1.6.1" patched for the IMQ driver inclusion.

The ipset version is "ipset v6.32"


The commands used were:

ipset create LocalMasq hash:net
ipset add LocalMasq 192.168.2.0/24
ipset add LocalMasq 192.168.10.0/24

iptables -t nat -A POSTROUTING -m set --match-set LocalMasq src -o eth0 -j
MASQUERADE


root at camulus:~# iptables -t nat -vxnL
...SNIP...         
Chain POSTROUTING (policy ACCEPT 12756 packets, 905661 bytes)
    pkts      bytes target     prot opt in     out     source              
destination         
     615    35682 MASQUERADE  all  --  *      eth0    0.0.0.0/0           
0.0.0.0/0           set [unsupported revision]

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170427/9eb818d4/attachment.html>