I would like to be able to filter by an IP ACL the connection coming from zabbix_agent in active mode.
There's a similar features for "Zabbix trapper" items called: Allowed hosts

Waiting for an autenticated connection from Server and Agent this can be usefull for some large environment over WAN without IPSEC/SSL tunnel

Enrico