Hi, On Fri, 10 Mar 2006, Menno Smits wrote: > Is there a reason why the ipset's nethash set type can't be used with > single IPs (/32) as well as larger networks? I'd really like to be able > to use networks and IPs in the same set. An IP(v4) address is a 32bit number. A network address consists of an IP address and a mask value. In nethash the IP address *and* the mask together are stored on 32bits. Therefore it is not possible to store plain IP addresses in that type of sets. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary