I think it would be usefull to declare PSD like the Packetfilter. If I want to protect just one IP out of a Class-C I have to define every Host and make an exclusion. If I can declare deny/allow for every entry with Host and Networks I got an easier controlling.
This thread was automatically locked due to age.