Specifying more than one IP address per rule

[Dan Purcell]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Is there a way (such as an iptables match) that allows one to specify
more than one IP address for one rule?  I have in mind something like
the multiport patch -- allowing the user to specify multiple tcp / udp
ports per rule.  For example, I have the following ruleset that I would
like to convert into one rule:

iptables -N BADGUYS
iptables -A BADGUYS -s 192.168.10.1    -j RETURN # 192.168.10.1 not bad
iptables -A BADGUYS -s 192.168.10.0/24 -j DROP
iptables -A BADGUYS -s 192.168.11.2    -j DROP
iptables -A BADGUYS -s 192.168.11.3    -j DROP
iptables -A BADGUYS -s 192.168.11.6    -j DROP

I would like something like

iptables -A BADGUYS -m multiip --srclist
[!192.168.10.1,192.168.10.0/24,192.168.11.2,192.168.11.3,192.168.11.6]
- -j DROP

- --

- --------------------------------------------------------------
Dan Purcell, Software Engineer     dpurcell at nitrosecurity.com
NitroSecurity, Inc.                            (208) 552-5332
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF/wk/Tqu8TzII/vURAnu7AKCGQrWo5WQL9NqQxnq+pcR+GFCY7gCg5ul9
hXek3Rza6Hgtd/xslOtqryY=
=kwdw
-----END PGP SIGNATURE-----