> Great, I think it should work fine! I just tried sent a patch to avoid ipset list chains. Please can you review? I was quite easy to implement, so maybe I miss something? What exactly was the reason to introduce those list chains?