From: John Beckett 

"Hrvoje Mesing"  wrote in
message news::
> I wanted to set Grant for just few IP_s and one subnet.
> Everything worked OK until one computer which was not allowed normally
> connected to the \\something\share$ which was active.

I don't know, but first check would be at command prompt on the something computer:

netstat -n

Exactly what IP is connected? It should be the rogue machine that you want
blocked. But is it?

It's a while since I played with IPSec filters so I am vague, but ISTR you
need a "catch all" rule to block access. You also have a rule to
permit the IPs that you want. I don't think you mentioned having a block
rule.

John

--- BBBS/NT v4.01 Flag-5