On Sat, 2003-11-29 at 14:06, Leonardo Rodrigues Magalhães wrote: > > In your case, 192.168.0.25, 192.168.0.26 and 192.168.0.27 cannot be > written as network/mask. So you CANNOT write one SINGLE rule to do what you > want. You'll probably need to write a single rule for each address. You could use 192.168.1.24/30, but that would include the address 192.168.1.24 as well. Not sure what's more important in this case, fewer rules or limiting the access from 192.168.1.24. C