On Mon, 1 Nov 2021 19:01:21 +0200 Grygorii Strashko wrote: > - 01:00:00:00:00:00 fixed value has to be used for MC packets rate > limiting (exact match) This looks like a stretch, why not use a mask? You can require users to always install both BC and MC rules if you want to make sure the masked rule does not match BC.