True, but I am looking for a more optimized solution 2008/4/9, Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>: > > On Wednesday 2008-04-09 20:40, Gilad Benjamini wrote: > > >I'd like to write a rule for a group. A group can include both single > >IP addresses and ranges of addresses. > >ipset can do the job with single addresses. > >iprange can do the job with ranges > > > >How can I combine the two ? > > > A range can be modeled upon collections of single addresses. > In short, you still use ipset; it will convert a range > to a number of single addresses and everything is fine. No? > -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html