This allows you to use the samba style @netgroup names in hosts allow and hosts deny. This patch still needs autoconf support for portability. To use this patch, run these commands for a successful build: patch -p1 static int match_hostname(const char *host, const char *tok) { if (!host || !*host) return 0; + if (*tok == '@' && tok[1]) + return innetgr(tok + 1, host, NULL, NULL); return iwildmatch(tok, host); }