> give us: > iptable-save > > -A FORWARD -s 192.168.0.1/32 -j ACCEPT > -A FORWARD -s 192.168.0.2/32 -j ACCEPT > > > So, maybe can we forbid iplist in vm rules ? (now we have ipset for this) > > > (I also find a bug with --src-range, I'll send patch) Ok for me.