On Wed 2009.03.04 at 14:18 -0500, Mark Saad wrote: [snip] > table NETGROUP_ALL const { $NETGROUP_SJL $NETGROUP_LON $NETGROUP_EWR > $NETGROUP_HKG $NETGROUP_BACKUP } need <> around NETGROUP_ALL. [snip] > pass in quick on $ext_if inet proto tcp from NETGROUP_ALL to ($ext_if) > port 22 again, need <> around NETGROUP_ALL.