Feature Requests

One thing I love about using Checkpoint is I can take a collection of hosts and group them into a logical entity (e.g. "Workstations").  Then I can create a simple ruleset for those hosts, vs. having to have individual rules for each IP.

Similarly, it'd be nice to be able to define multiple services (essentially, port and protocols) and group them as well.  (e.g. TCP 53 and UDP 53 as "DNS",  TCP 80, 443, and 8080 as "Web", etc.) 

Excellent... I was joining the forum to post exactly this request! 

At the moment I have three DNS servers on my LAN which point to three up-stream DNS root servers for resolution.

With m0n0wall's current GUI, I need to create nine separate rules to cover this.

It would be great to be able to create groups for both Source and Destination sections of a rule and be able to add either multiple static IP's and IP ranges into a group.

Also I like the idea in checkpoint of a Service, which would contain multiple protocol/port entries.

This would effectively reduce my group of nine rules into one single rule.

Anyone else like this idea?

I like the idea.  Although, it's at the bottom of my list for m0n0 nice-to-haves.