Export-policy for CIFS/SMB not working according to the export-policy rules

Hello,

We were testing the Ontap feature to restrict a CIFS share based on ComputerNames/IPAddresses using export policies.

The idea was to deny access to a set of computers and grant access to the remaining systems.

For eg.,

Export-policy: Test1

Rule1: Deny access to System A

Rules2: Allow access to 0.0.0.0/0 (remaining systems)

Requirement: Only System A should be denied access but rest should be able to access the share. But with the above rules in place, System A was also able to access the share.

If I get it right, rules are processed in order based on rule index and if a client matches 1^st rule, rest will be ignored.

Is this the default behaviour?

Is there anyway I could adjust export-policy rules to meet my requirement?

Please suggest.

Thanks in advance!