* Michelle Konzack: > hostssl all all 192.168.0.64/192 md5 This line doesn't look valid. And, quoting the documentation: | The first record with a matching connection type, client address, | requested database, and user name is used to perform authentication. So your preceding reject line is likely the culprit.