--On Friday, December 07, 2012 4:09 PM -0600 Scott Koranda
>I checked and the 3 DNs that survive are not different in any
>substantial way then the 97 DNs that are effectively hidden.
>Any ideas why the 3 DNs survive the rewriting?
No. But why don't you just use an ACL with a regex instead?
Indeed. That is a simpler and elegant solution. Thanks.