> > Don't you rather want to use "dst" instead of "dstdomain"? >
From the FAQ on Access Controls :
# dst: destination (server) IP addresses
^^^^^^^^^^^^^^^^^^^^
# myip: the local IP address of a client's connection
# srcdomain: source (client) domain name
# dstdomain: destination (server) domain name
M.
