I know what to do and how, but it's one of those hind-sight things that aren't worth the trouble for now. It's done in our IPv6 firewall code, but that isn't deployed anywhere yet.for i in $(cat $( ls *.zone|egrep -v "[ca|us]" ))';[ do echo "add -exist restofworld $i";done |ipset restore
but you need maxelem to be 256k to get the whole set.