Hi, On Fri, Jan 25, 2019 at 04:59:46PM +0100, Florian Westphal wrote: > pretends that > ip saddr { 1.1.1.1 } > > is > ip saddr 1.1.1.1 > > Needs more work (breaks dumps in test cases afaics). > Is that a good idea in first place? > > I see various new users adopting > > { single-value } > > probably due to copying/adapting a "{ foo, bar }" rule to "{ foo }"... I think it's a good idea. Just like with auto-merging of ranges, anonymous sets may (and IMHO should) optimize themselves as much as possible. Cheers, Phil