Dariush Debian Diary

• ipset utility (backport from sid)
• ipset-patched kernel (2.4.33-bsd33c+)
• modprobe ip_set
• ipset -N server ipmap --network 192.168.0.0/16
• ipset -A server 192.168.16.16
• ipset -L

• iptables -A FORWARD -m set --set server dst,dst -j ACCEPT
  

divisor is a number of entries in given table,
for (h = 0; h <= ht->divisor; h++) {
where h is 'unsigned', this suggests 65535 max, but it seems that in reality it's limited to 255 Apparently, it must be in form of 2^x (1,2,4,8,16...256), otherwise you get:

host:~# tc filter add dev eth1 parent 1: prio 0 handle 1: protocol ip u32 divisor 17
Illegal "divisor"