I thought ipset had sprouted full ipv6 support a while back which would make for simpler rules like this
ipset create egress-ipv4 hash:net ipset add egress-ipv4 127.0.0.0/8 ipset add egress-ipv4 192.168.0.0/16 ipset add egress-ipv4 10.0.0.0/8 ipset add egress-ipv4 172.16.0.0/12 ipset add egress-ipv4 169.254.0.0/16 where you could do something like add the external network on a double natted situation easily, on bringing up the external interface. ipset add egress-ipv4 10.0.1.0/24 nomatch but no ipv6 in my build although the doc claims it exists. ipset create family inet6 egress-ipv6 ipset add egress-ipv6 fd::/10 reading source.... -- Dave Täht Fixing bufferbloat with cerowrt: http://www.teklibre.com/cerowrt/subscribe.html _______________________________________________ Cerowrt-devel mailing list Cerowrt-devel@lists.bufferbloat.net https://lists.bufferbloat.net/listinfo/cerowrt-devel
