Ipset wiki Rmerl not working

[PoloNes]

I have AC68u with fw 376.48_1 .
Scripts wiki Using ipset are not working, are returning an error.

https://github.com/RMerl/asuswrt-merlin/wiki/Using-ipset

Error : --set option deprecated , please use --match-set

How to fix it?



Enviado do meu iPad Mini retina usando Tapatalk

 

[octopus]

I have AC68u with fw 376.48_1 .
Scripts wiki Using ipset are not working, are returning an error.

https://github.com/RMerl/asuswrt-merlin/wiki/Using-ipset

Error : --set option deprecated , please use --match-set

How to fix it?



Enviado do meu iPad Mini retina usando Tapatalk

Replace "-m set --set" with "-m set --match-set"

 

[PoloNes]

Replace "-m set --set" with "-m set --match-set"

Thanks for helping .

I have replaced in firewall-start script and PeerGuardian .

Now, It haven't returned any error. Is It OK by not returning any output msg?

Best Regards,
PoloNes


Enviado do meu iPad Mini retina usando Tapatalk

 

[octopus]

Thanks for helping .

I have replaced in firewall-start script and PeerGuardian .

Now, It haven't returned any error. Is It OK by not returning any output msg?

Best Regards,
PoloNes


Enviado do meu iPad Mini retina usando Tapatalk

You don't se any output msg there, you have to run whole script from putty or telnet.
Run this "iptables -vnL INPUT" to se if counter se any INPUT PeerGuardian packets.

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
 746K  124M ACCEPT     all  --  tun21  *       0.0.0.0/0            0.0.0.0/0
 821K  200M ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:9999
    [COLOR="Magenta"][B]1    40 logdrop    all  --  *      *       0.0.0.0/0            0.0.0.0/0            match-set Hammer_ips src,dst[/B][/COLOR]
   63  3312 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpts:9970:10000
 1433 90055 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            state INVALID
60725 9834K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            state RELATED,ESTABLISHED
 2977  318K ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0            state NEW
29067 4065K ACCEPT     all  --  br0    *       0.0.0.0/0            0.0.0.0/0            state NEW
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp spt:67 dpt:68
    3   120 SSHBFP     tcp  --  vlan10 *       0.0.0.0/0            0.0.0.0/0            tcp dpt:8787 state NEW
 386K   55M DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0

This is only an example how it could be.

 

[PoloNes]

You don't se any output msg there, you have to run whole script from putty or telnet.

Run this "iptables -vnL INPUT" to se if counter se any INPUT PeerGuardian packets.

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)

 pkts bytes target     prot opt in     out     source               destination

 746K  124M ACCEPT     all  --  tun21  *       0.0.0.0/0            0.0.0.0/0

 821K  200M ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:9999

    [COLOR="Magenta"][B]1    40 logdrop    all  --  *      *       0.0.0.0/0            0.0.0.0/0            match-set Hammer_ips src,dst[/B][/COLOR]

   63  3312 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpts:9970:10000

 1433 90055 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            state INVALID

60725 9834K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            state RELATED,ESTABLISHED

 2977  318K ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0            state NEW

29067 4065K ACCEPT     all  --  br0    *       0.0.0.0/0            0.0.0.0/0            state NEW

    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp spt:67 dpt:68

    3   120 SSHBFP     tcp  --  vlan10 *       0.0.0.0/0            0.0.0.0/0            tcp dpt:8787 state NEW

 386K   55M DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0

This is only an example how it could be.

See it.

Enviado do meu iPad Mini retina usando Tapatalk

 

[octopus]

See it.

Enviado do meu iPad Mini retina usando Tapatalk

Yes seems to work BlockedCountries have blocked traffic.