From f38eb1535055a84ae11bc01d7e116d63d057c03b Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Tue, 5 Jul 2011 07:50:32 -0700 Subject: [PATCH] Correct check for new ipset match syntax Signed-off-by: Tom Eastep --- Shorewall6/lib.cli | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Shorewall6/lib.cli b/Shorewall6/lib.cli index 31ad6c02d..08e4bc7fb 100644 --- a/Shorewall6/lib.cli +++ b/Shorewall6/lib.cli @@ -1670,8 +1670,8 @@ determine_capabilities() { if qt ipset -N $chain hash:ip family inet6; then IPSET_V5=Yes - if qt $IP6TABLES -A $chain -m set --set $chain src -j ACCEPT; then - qt $IP6TABLES -D $chain -m set --set $chain src -j ACCEPT + if qt $IP6TABLES -A $chain -m set --match-set $chain src -j ACCEPT; then + qt $IP6TABLES -D $chain -m set --match-set $chain src -j ACCEPT IPSET_MATCH=Yes elif qt $IP6TABLES -A $chain -m set --set $chain src -j ACCEPT; then qt $IP6TABLES -D $chain -m set --set $chain src -j ACCEPT