I have a share that had this Hosts allow entry:
and this Hosts Deny entry:
I have these clients that could not write to the share until I removed the ALL Hosts Deny:
172.16.18.113
172.16.18.115
Those clients should have been allowed by the 172.16.16.0/21.
Do I have a syntax problem?