>DEFAULT > Ldap-Group != "cn=routing_admins,ou=groups,dc=mydomain,dc=hu", > Auth-Type := Reject > Sorry, this looked like a single line in my webmail. It should be: DEFAULT Ldap-Group != "cn=routing_admins,ou=groups,dc=mydomain,dc=hu", Auth-Type := Reject (all on the same line). Ivan Kalik Kalik Informatika ISP