[pve-devel] [PATCH] implement ipset ip/net groups

[Dietmar Maurer]

> groups.fw
> ---------
> [ipgroup ipgroup1]
> 
> 192.168.0.1
> 192.168.0.2
> 192.168.0.3
> 
> [ipgroup ipgroup2]
> 
> 192.168.0.3
> 192.168.0.4
> 
> [netgroup netgroup1]
> 
> 192.168.0.0/24
> 10.0.0.0/8

Stupid question, but why do we need different types - netgroups and ipgroup?

We can easily represent a single IP as network:  192.168.0.1/32

or is there a problem with that?