<tdat name="tdat"> <system name="gizmo"> <users> <user name="drct01" tag="xyzzy"/> <user name="perm01" tag="noside"/> <user name="extuser" tag="shazam"/> </users> <ipfilters> <ipfilter name="filter1" type="restrictive"> <allow ip="192.0.2.200/255.255.0.0"/> <deny ip="192.0.2.20/255.255.255.0"/> <appliesto tagref="xyzzy"/> <appliesto tagref="shazam"/> </ipfilter> <ipfilter name="filter2" type="permissive"> <deny ip="192.0.2.22/255.255.255.0"/> <allow ip="192.0.2.205/255.255.255.255"/> <appliesto tagref="noside"/> <appliesto tagref="xyzzy"/> </ipfilter> </ipfilters> </system> </tdat>