no or..should I just make the DomainPOlicy go above Wot?

Reply to this note

Please Login to reply.

Discussion

Are you sure the whole thing isn't wrapped in an AnyPolicy? That's an OR

I removed the AnyPolicy for testing purposes

If it's a PipePolicy, it should work to block it. Grep your logs with "ditto.system.policy" to make sure it's even using the policy.

ty! it's working now

I swapped the order like I said earlier