> I am trying to add a rule that covers part of a class C > range. I want to allow 10.0.0.50 through 10.0.0.254 or > simply deny .1 through .50 then > allow the whole range. Is there a syntax that will allow me > to do this > in one rule? I have searched extensively before bugging the > list for help. If you search on www.netfilter.org in the Patch-O-Matic Base repository, you can find : http://www.netfilter.org/patch-o-matic/pom-base.html#pom-base-iprange For this, you will have to patch and recompile your own kernel as I don't think this functionality is enabled in a default kernel from a Linux distro. Gr, Rob