hi jim,

thank you, but i had to solve it for 1.3.x. so what i found
is a combination with SetEnvIf and Remote_Addr and it looks
like this:

in the general settings i build up a list of

SetEnvIf Remote_Addr "a.b.c." no_office
SetEnvIf Remote_Addr "a.b.d." no_office

and later in the <directory>-part i use

Allow from a.b.
Deny from env=no_office

that works fine! :-)
regards
jens