Hi All, Its possible creates a rule that can match all the traffic designated to an specific interface? Example: pass in on $vlan10 from <vlan10> to (the interface, not the address) $ext_if The $ext_if:network doesn't works for me. Thanks. David Verzolla Administrador de Redes Fundação Cásper Líbero - FCLNet Tel: +55 11 3170.5937