> >> Also, wouldn’t it be good to define aliases at VM level (100.fw)? > >> > >>But this would be a good addition? > > Yes,it could be usefull. (multiple vm rules with same alias) > > maybe for ipset too ? (ipset defined at vm level ) yes.