From d2aaadbb8c3fe0e3d8ca43c7c055cb20d54c24f1 Mon Sep 17 00:00:00 2001 From: Viktor Liu Date: Mon, 20 Apr 2026 19:56:45 +0200 Subject: [PATCH] Replace deprecated iptables --set with --match-set in ACL ipset match --- client/firewall/iptables/acl_linux.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/client/firewall/iptables/acl_linux.go b/client/firewall/iptables/acl_linux.go index 763e500cd..e5e19cec9 100644 --- a/client/firewall/iptables/acl_linux.go +++ b/client/firewall/iptables/acl_linux.go @@ -450,7 +450,7 @@ func filterRuleSpecs(ip net.IP, protocol string, sPort, dPort *firewall.Port, ac if matchByIP { if ipsetName != "" { - specs = append(specs, "-m", "set", "--set", ipsetName, "src") + specs = append(specs, "-m", "set", "--match-set", ipsetName, "src") } else { specs = append(specs, "-s", ip.String()) }