You can't really, filters can't have IPs set dynamically. A decent
compromise is a filter that allows the 30 IPs in the pool and just those
30. Either as a subnet permit (if it is an even subnet) or a filter with
30 permit rules.
Not perfect, but a damn sight tighter than no filters.
-MZ
-- Livingston Enterprises - Chair, Department of Interstitial Affairs Phone: 800-458-9966 510-426-0770 FAX: 510-426-8951 megazone@livingston.com For support requests: support@livingston.com <http://www.livingston.com/> Snail mail: 6920 Koll Center Parkway #220, Pleasanton, CA 94566 See me in person: Internet Expo, Boston, MA, October 16-17, Booth 422 ;-)