pfSense

Interface groups cannot have the same name as an actual interface, nor any system-defined aliases (IPsec, OpenVPN, etc.). It doesn't actually add them to the ruleset in such instances so it doesn't break anything, but it should not be allowed since it won't work.

Similarly, interface names must be checked to ensure they don't conflict with a group name.