On Wed, 14 Feb 2001, Cricket Liu wrote: > > > Actually you can. Deny the IP's you don't want then accept > > by key. > > Cute! I hadn't thought of that. > > cricket Interesting. What is the best way to DENY, say, everything but one IP address or my local subnet? What kind of match list expression(s) would capture that? -- ian