Allow ipsets of ipsets

[luizluca]

Linux ipset supports list:set. Would it be possible to have it in firewalld?

[fuleru]

Yes, can firewalld support ipset list:set type?

#ipset help | grep support$ | awk -F " " '{print $1}' | sort -u
bitmap:ip
bitmap:ip,mac
bitmap:port
hash:ip
hash:ip,mark
hash:ip,port
hash:ip,port,ip
hash:ip,port,net
hash:net
hash:net,iface
hash:net,net
hash:net,port
hash:net,port,net
list:set


# firewall-cmd --get-ipset-types
hash:ip hash:ip,mark hash:ip,port hash:ip,port,ip hash:ip,port,net hash:mac hash:net hash:net,iface hash:net,net hash:net,port hash:net,port,net