On Monday 20 October 2008 07:54:31 Raghavendra G wrote: > option auth.ip.brick.reject !192.168.0.19 #reject all clients other than > 192.168.0.19 option auth.login.brick.allow john > option auth.login.joe.password bigsecret Thank you! I missed the part about being able to accept *and* reject by an authentication method. So to accept an IP address, you must reject all others. > authentication works on the principle that "In order to allow access to a > client, none of the authentication methods configured should reject the > client and atleast one of the methods should accept the client" &:-)