On Thu, September 28, 2006 13:35, Burak Ozgoren wrote: > Hi, > > > I know i can write source ip within a ip range or with a network mask. For > example: 192.168.0.5-192.168.0.15 or 192.168.0.0/24 > > > Can i write it for single ip. Like 192.168.0.5 and 192.168.0.9 You can use the second notation (192.168.0.0/24), but for the first you need the iprange match. http://www.netfilter.org/projects/patch-o-matic/pom-base.html#pom-base-iprange Grts, Rob