:-) One more question: The documentation for `match-clients' isn't comprehensive enough... Can I add all host from, for example 172.16/16 except a single host? Does: match-clients { 172.16.0.0/16;!172.16.1.1; } form an AND or an OR? Best regards, /m