The ongoing Firewall Saga! (Victims - I mean volunteers - wanted!)

You should be able to add a hostname as a network, and assign it to a zone. That's not documented all that well, and, now I think about it, I didn't actually test that

That's the IDEA, at least. Try it?

--Rob