i set up rule for a specific user to restric his access to some hosts.
since there was no "host" selection possible i selected "address list"
and extered the hosts address both for start and end.

this rule ist the first in the client to site one and it applies onyl to
this specific user.
he call establish a vpn conntection (nmas, nds) but can access ALL availabe
hosts, not only the one's i've specified.

any ideas ? / anything to refresh / restart ?

ps: aclcheck told me that it has read new rules