Default Authenticate not working

I have an RB433AH with SR2 running ROS 3.23.
When I uncheck “default authenticate” in the wireless settings I can still connect even though the mac is not in the “access list”.
This used to work and I’m not sure when the problem started as I had a RB532 running 3.20 prior.
The only reason I noticed it was because I’m only a block away and I use the ap to test equipment. I usually have to add the mac to the access list. I just got some new equipment and configured them and they connected immediately. I checked the access point and all settings are correct. Mac address is not in the access list.
I tried checking and unchecking “default authenticate” and rebooting the ap. No joy.

Anybody seen this or have any suggestions?
This ap is not running any encryption yet and hiding the ssid and mac authentication is the only security right now.

is anything in the access list at all? if yes, you need one empty rule at the end with authenticate=no

just like firewall

Yes there are entries for each mac that I want authorized.
However, they connect whether there is an entry or not.

you need one empty rule at the end with authenticate=no

Like this??

add authentication=no comment="" disabled=no forwarding=no interface=all mac-address=00:00:00:00:00:00

When did this come about??

Gave it a try. Same result.
Client still connects even though mac is not in access list.

wireless setting
default-authentication=no default-forwarding=no

works in 3.24

It works in 3.23 also with same type radio.
I’m reloading the ros tonight. This is strange.

Damn, I found a blank mac address in the access list with “Authenticate” checked.
Wonder where that came from??