Replace deprecated iptables --set with --match-set in ACL ipset match

This commit is contained in:
Viktor Liu
2026-04-20 19:56:45 +02:00
parent 4506f82b2d
commit d2aaadbb8c

View File

@@ -450,7 +450,7 @@ func filterRuleSpecs(ip net.IP, protocol string, sPort, dPort *firewall.Port, ac
if matchByIP {
if ipsetName != "" {
specs = append(specs, "-m", "set", "--set", ipsetName, "src")
specs = append(specs, "-m", "set", "--match-set", ipsetName, "src")
} else {
specs = append(specs, "-s", ip.String())
}