On Fri, 18 Jun 2004 17:06:28 +0100 Antony Stone <Antony@xxxxxxxxxxxxxxxxxxxx> wrote: > You have specified an inappropriate combination of address and netmask with > 172.25.239.220/27 - the address 220 is not the base address of a /27 range, > and it is possible (I am not certain) that this combination is confusing > netfilter. I don't think this is a problem. They'll be masked out anyway. Leslie