On Thu, 30 Sep 2004, Temp02 wrote: > No obviously a single source can't be both addresses, but the intent is to > allow a single rule to be used to match sources from both source ranges. There is two ways for doing this a) Using two rules, one per IP address. b) Using an ippool/ipset storing the IP addresses. Regards Henrik