I think this is working now in 21.1.5. ipfw has issues with "large" number of addresses in the rule syntax.Cheers,Franco