ipset causes reverse dns lookups?

[Ed W <lists@xxxxxxxxxxxxxx>]

Hi, ipset appears to require a reverse dns lookup for say:

    ipset create cp bitmap:ip,mac range 192.168.111.0/24

Why?

In particular if I lock down iptables (-P DROP), then the above command 
takes quite some seconds to complete, rather than instantly if I open up 
iptables.  This is causing me some problems with startup scripts

Am I missing some configuration option? Is this a bug? Why is a reverse 
DNS lookup needed?

ipset 6.9.1, kernel 3.2.13

Thanks

Ed W
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html