Firewall rule for current subnet?

[martinfay 0]

Is there any way to create a rule which references the current subnet? i.e. it could be exported from a machine on subnet 10.x.y.0, imported to a machine on subnet 10.a.b.0 and still work?

 

I have a need to deploy a standard configuration to many machines at customer sites, and want to restrict some applications (i.e. VNC) to use within the "appliance" subnet.