> BTW, why do you use ipset for aliases? sorry - ignore this stupid question ;-) > Also, wouldn’t it be good to define aliases at VM level (100.fw)? But this would be a good addition?