On 02/01/2011 01:35 PM, Pandu Poluan wrote: > Any reason for "from_all to_all"? > Why not just: > http_access allow within_timeframe_rule1 wow. ok, now i feel stupid :) well. this is because the rules are dynamically created by a template engine. but it should be possible to remove these. it works after all,. thanks a lot! peter -- :: e n d i a n :: open source - open minds :: peter warasin :: http://www.endian.com :: peter@xxxxxxxxxx