The IP addresses in the CP definitely need to be IP-addresses.
The reason behind this is that if using domain-names, the firewall rules and configuration would need to check for changed dns on a regular basis. There isn't a decent event handler/scheduler currently build in M0n0wall so that's why we are using IP's (which sadly enough cannot be changed)
J.
Then an IP range would be useful. At least then you can cover where the IP can float around for server farms that host domains.