On Thu, 2008-03-20 at 13:51 -0800, Chris Robertson wrote: > Put the always direct line above the never direct one (or use multiple > ACLs and always direct lines). They work just like http_access lines in > that it's a first match. Not quite.. always_direct is always before never_direct. always_direct allow A never_direct allow B always_direct deny C never_direct allow D is the same as always_direct allow A always_direct deny C never_direct allow B never_direct allow D Regards Henrik
