From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-we0-x236.google.com (mail-we0-x236.google.com [IPv6:2a00:1450:400c:c03::236]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id D4F5721F113 for ; Wed, 15 Jan 2014 11:46:36 -0800 (PST) Received: by mail-we0-f182.google.com with SMTP id w62so2229134wes.41 for ; Wed, 15 Jan 2014 11:46:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=FIWFbSxT6WzIUziBS98UNnN7yBpUIspgHsDkvDK3kE4=; b=pwMJAIHXB1vJKQF9nlyFjGU6nK034zuOLu5G35YSxVoWnwvFpyljVYFYYC715CQ5OV ACc4iZ6TCdP6yAx7rO0U1BOHtal1XLw/tRNdYHJdxvG2lcrOOkjyEle3mpnVP0GQ0f31 yD79eMRRBE4ESkFzdHEM0BpmorHFYRi2wC4s7IlBKTu3Aqa4SHuzAj1COe+PDhPWztET CcvdBDP+4wn3CmpUa21bdNi4Q3Tm5WKewrPfbQOWU3kzxq1e5Z3a5cpUXWqB0ZFTifY3 qQgW8zazokqX6ETld0yRp1I0ozTXu+k8xDEU8euNERTKMMYKU6PxDaTxqroGYtTaNH48 DN5A== MIME-Version: 1.0 X-Received: by 10.194.142.231 with SMTP id rz7mr22748wjb.89.1389815186867; Wed, 15 Jan 2014 11:46:26 -0800 (PST) Received: by 10.217.123.69 with HTTP; Wed, 15 Jan 2014 11:46:26 -0800 (PST) Date: Wed, 15 Jan 2014 14:46:26 -0500 Message-ID: From: Dave Taht To: "cerowrt-devel@lists.bufferbloat.net" Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Subject: [Cerowrt-devel] ipsets in openwrt issues X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Jan 2014 19:46:58 -0000 I thought ipset had sprouted full ipv6 support a while back which would make for simpler rules like this ipset create egress-ipv4 hash:net ipset add egress-ipv4 127.0.0.0/8 ipset add egress-ipv4 192.168.0.0/16 ipset add egress-ipv4 10.0.0.0/8 ipset add egress-ipv4 172.16.0.0/12 ipset add egress-ipv4 169.254.0.0/16 where you could do something like add the external network on a double natted situation easily, on bringing up the external interface. ipset add egress-ipv4 10.0.1.0/24 nomatch but no ipv6 in my build although the doc claims it exists. ipset create family inet6 egress-ipv6 ipset add egress-ipv6 fd::/10 reading source.... --=20 Dave T=E4ht Fixing bufferbloat with cerowrt: http://www.teklibre.com/cerowrt/subscribe.= html