Using network addresses like 192.168.0/8 is well, but it's not granular enough: just because we cannot provide all the addresses if they don't follow this contiguous rule. So I'm finally wondering about iprange. Most of linux distributions, with the ones I know, don't provide iprange for the kernel. Are there any performance or security issue behind this behavior ? Or is it simply a 'bad' choice of those distributors ? But maybe it's simply due to the kernel version. It appears 2.6.x provide this option at default; but if I remember well 2.4.x didn't.