Hello Phil, Don't worry, I'm used to people not actually reading what I write. I already wrote some working, albeit ugly, code that converts ranges and CIDR to individual IP-addresses. But I think if nft would have the option to simply produce the individual addresses belonging to the set/table, it would make the whole script a lot simpler and more logical. Have a nice day, Han