[Bug 1234] New: iptables match-set with multiple ipsets doesn't work

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1234

            Bug ID: 1234
           Summary: iptables match-set with multiple ipsets doesn't work
           Product: iptables
           Version: 1.4.x
          Hardware: x86_64
                OS: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: iptables
          Assignee: netfilter-buglog at lists.netfilter.org
          Reporter: kevin at zattoo.com

I try to add multiple match-sets in one rule. I can add it, but afterwards the
rule doesn't work (counter stays at zero)

iptables -A INPUT -p tcp -m multiport --dports 22 -m comment --comment "012
accept incoming SSH" -m set --match-set trustednet src -m set --match-set NETS
src -j ACCEPT

If I split them into two rules, it works without any issue.

Tested it with iptables 1.4 and 1.6.
ipset v6.23

Maybe this behavior is expected, but I didn't find anything in the man pages or
documentation.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20180316/7546e124/attachment.html>