Is there a way in tcng to specify range instead a list of addresses, what I mean instead : drop if (ip_src == 192.168.0.2 || ip_src == 192.168.0.3 || ip_src == 192.168.0.4 || ip_src == 192.168.0.5); may be : drop if (ip_src == 192.168.0.2 .. 192.168.0.5); drop if (ip_src == 192.168.0.2 - 192.168.0.5); or better : drop if (ip_src == 192.168.0.2-5);