I want configure an exports file to grant a client ro access when I¹ve excluded the subnet the client belongs to from rw access.

The man page reads: ³You cannot exclude an NFS client identifier from the ro= or rw= option and include the same NFS client identifier in the other option², but I¹m wondering if that restriction applies to subnets.

This is what I have now:

/vol/vol0/dir1 -sec=sys,rw=-123.123.4.0/24:123.123.0.0/16,root=adminhost

And I want something like this:

/vol/vol0/dir1 -sec=sys,ro=123.123.4.4,rw=-123.123.4.0/24:123.123.0.0/16,root=adminhost

Is this possible?