I have a 2 node cluster with BM 3.7 on them. I had rules and surf
on both server objects. I moved my rules to a higher o=top. Due to
the way
surf control is I had to leave those rules at the server level.

My problem is the way that BM creates the rules list. It puts the
rules first and then goes up the tree for other rules. I had some
allow url
rules before my surfcontrol rules. Now since those rules are in the
my surfcontrol is blocking some harmless sites.

I moved the rules up so I would only need to update the rules once at
o=top level instead of changeing rules twice.

Any suggestions other than putting an allow rule on each server above
surfcontrol deny rule effectively negateing my idea of making updates
once and not twice.