> In that case the config you posted is all correct. You have a > global allow for localnet before domini_bloccati is ever > tested so it can't even be a bad domain entry in there. > > It must be something else doing the denial. Yes, indeed. Thanks for your confirmation, but now how do I solve this? Ooooopppsss... I'll be taking a look at access.log... ;-) BRB