Please update net-firewall/ipset to v6.21.1. Changes: 6.21.1 Kernel part changes netfilter: ip_set: rename nfnl_dereference()/nfnl_set() (Patrick McHardy) Userspace changes The bash utilities are updated Fix libipset library release versioning (reported by Mathieu Bridon) 6.21 Kernel part changes ipset: add forceadd kernel support for hash set types (Josh Hunt) netfilter: ipset: move registration message to init from net_init (Ilia Mirkin) kernel: uapi: fix MARKMASK attr ABI breakage (Florian Westphal) Prepare the kernel for create option flags when no extension is needed add markmask for hash:ip,mark data type (Vytas Dauksa) add hash:ip,mark data type to ipset (Vytas Dauksa) ipset: remove unused code (Stephen Hemminger) netfilter: ipset: Add hash: fix coccinelle warnings (Fengguang Wu) Typo in ip_set_hash_netnet.c fixed (David Binderman) net ipset: use rbtree postorder iteration instead of opencoding (Cody P Schafer) ipset: Follow manual page behavior for SET target on list:set (Sergey Popovich) Userspace changes ipset: add userspace support for forceadd (Josh Hunt) kernel: uapi: fix MARKMASK attr ABI breakage (Florian Westphal) lib: fix ifname 'physdev:' prefix parsing (Florian Westphal) Prepare the kernel for create option flags when no extension is needed print mark & mark mask in hex rather then decimal (Vytas Dauksa) add markmask for hash:ip,mark data type (Vytas Dauksa) add hash:ip,mark data type to ipset (Vytas Dauksa) ipset: manpage: correct add action synopsis for hash:net,port,net. (Mart Frauenlob) ipset: manpage: remove spare comma for hash:net,net test action. (Mart Frauenlob) Fix all set output from list/save when set with counters in use. (Sergey Popovich) ipset: Fix malformed output from list/save for ICMP types in port field (Sergey Popovich) ipset: fix timeout data type size (Nikolay Martynov) Reproducible: Always
InCVS.
