On Wednesday 2008-04-09 20:40, Gilad Benjamini wrote: >I'd like to write a rule for a group. A group can include both single >IP addresses and ranges of addresses. >ipset can do the job with single addresses. >ipragne can do the job with ranges > >How can I combine the two ? A range can be modeled upon collections of single addresses. In short, you still use ipset; it will convert a range to a number of single addresses and everything is fine. No? -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html