On Fri, 14 Sep 2018, Kenneth Porter wrote: > I'm using a kernel with ipsets compiled in, rather than loaded as a module. The > support script that saves ipsets checks if the module is loaded before saving > and finds nothing, so aborts. Why does it need to make this check? Likely the check is there to avoid an abort when the commands are issued but w/o the feature present. So customize the script -- it sounds like you found the one that's at fault. /mark