Your observation about .regex is valid for what you wrote. However, considering the implementation of most regex libraries, I'd imagine that .ip=10.0.0.0%255.0.0.0 would be cheaper. See slapd.access(5). On Fri, 1 Jul 2005, Sean Hussey wrote: > by peername="10.*.*.*" read