On Wed, May 24, 2006 at 14:27:20 -0400, Ed Kim <ed.kim@xxxxxxxxxxx> wrote: > > iptables -A FORWARD -m iprange --src-range 222.96.0.0-222.122.255.255 -j > DROP > (syntax may not be correct, see man iptables) That's nice. Is it approximately as effcient as using a mask?