Thanks! That sure worked! :-) > > acl can_query { !1.2.3/24; any; }; > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > The acl statement belongs *outside* the options statement!