On Mon, 2003-06-30 at 17:30, Ramin Dousti wrote: > On Mon, Jun 30, 2003 at 10:42:13AM -0400, James R. Hay wrote: > > > > > Hi folks, > > Hi James, > > Indeed, you cannot do this with netfilter. Netfilter does not provide you > with the "don't care bits" as cisco calls it. What's wrong with: -s 0.0.0.0/0.0.255.255 ? -- /Martin