On 20/11/13 21:32, Amos Jeffries wrote: > > I suggest upgrading to 3.3 release before going any further with this. > The old series have a few very strange bugs in auth behaviour which > are fixed by a large overhaul in recent releases (you could end up > putting a lot of time and effort in before finding the simple upgrade > fixes your issue). > > Amos Any other suggestions out there ? Sorry Amos, but I fear that upgrading will not be a simple task; I tried a 3.2 release a while ago but it didn't seem to support "dotted quad" IP address masks, only CIDR prefixes worked, and I need to be able to use such acl entries as "acl school_machines src 10.0.20.0/255.0.255.0 10.0.21.0/255.0.255.0" which I could not get to work using CIDR syntax (maybe I wasn't trying hard enough!). Mark