> No difference whatever is done. PEER1, !PEER1, !PEER2... No peer... Seperate lines... > > SRC IP is never available, so it always fails. PEER is available though, I can make it work with using just PEER1. Going direct works also as expected. > > Thanks. > > Jenny > > > kid1| ACLChecklist::preCheck: 0x7ffff504abc0 checking 'request_header_access User-Agent allow OFFICE_IP !PEER1' > kid1| ACLList::matches: checking OFFICE_IP > kid1| ACL::checklistMatches: checking 'OFFICE_IP' > kid1| aclIpAddrNetworkCompare: compare: [::]/[ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00] ([::]) vs 2.2.2.0-[::]/[ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00] > kid1| aclIpMatchIp: '[::]' NOT found > kid1| ACL::ChecklistMatches: result for 'OFFICE_IP' is 0 > kid1| ACLList::matches: result is false > kid1| aclmatchAclList: 0x7ffff504abc0 returning false (AND list entry failed to match) Is there an update on this? Shall I file a bug? I am going on about this matter since November-2010. Thanks Jenny
