On 14.12.2003, at 23:13, Bart Smit wrote:

> I specifically meant a way to name *groups* of IP's and networks.  so I
> can have a single rule apply to several nets at once. E.g. 5 different
> remote networks that all need the same treatment from my firewall. I 
> want
> to call them "remote office nets" and be done with a single rule per
> protocol instead of having to create 5 rules, one for each net.

Yep, I know and I got that point, but instead of implementing a clumsy 
solution right now (having the filter rule generator install several 
rules for the different addresses/networks associated with an alias - 
imagine using aliases with 10 addresses each for both a rule's source 
and destination - boom, 100 ipf rules! [or at least a mess of >20 rules 
with skip or head/group]), I'd rather wait until ipfilter 4.0 is 
released and we get native alias support. m0n0wall's filter rule part 
will be in for a major overhaul at that point in time anyway.

- Manuel