I have a 2 node cluster with BM 3.7 on them. I had rules and surf
control
on both server objects. I moved my rules to a higher o=top. Due to
the
way
surf control is I had to leave those rules at the server level.

My problem is the way that BM creates the rules list. It puts the
server
rules first and then goes up the tree for other rules. I had some
allow
url
rules before my surfcontrol rules. Now since those rules are in the
o=top,
my surfcontrol is blocking some harmless sites.

I moved the rules up so I would only need to update the rules once at
the
o=top level instead of changeing rules twice.

Any suggestions other than putting an allow rule on each server above
the
surfcontrol deny rule effectively negateing my idea of making updates
only
once and not twice.


Thanks