no or..should I just make the DomainPOlicy go above Wot?
Are you sure the whole thing isn't wrapped in an AnyPolicy? That's an OR
Please Login to reply.
I removed the AnyPolicy for testing purposes
If it's a PipePolicy, it should work to block it. Grep your logs with "ditto.system.policy" to make sure it's even using the policy.
ty! it's working now
I swapped the order like I said earlier