Shawn Wilson a écrit : > > Pascal Hambourg <pascal@plouf.fr.eu.org> wrote: >> >> Unless recent change I am not aware of, you cannot specify an address >> range in -s or -d. You must use the "iprange" match instead (or ipset if >> your kernel supports it). > > Also, idk any way to match interface with ipset I did not suggest ipset for such purpose.