> OK, I finally understand the problem. I guess I will implement the suggestion > from Alexandre: > > [ipset ipfilter-net0] > ... > > > I guess that will work for you? OK, Implemented - please can you test?