Re: Acl Rules

> I wrote an access list rule such as:
>
> acl ourclass src 200.239.56.0/255.255.255.0
> http_access allow ourclass
>
> That works just fine for my Class C.
>However, I would like to control the
>access to my proxy with a domain rule, so that only IP address identified on
>my DNS would access my proxy.
> If my understanding of the rule is incorrect, please forgive me.

To prevent hosts that would access your proxy, you must define
the access control using

acl ourclass src ... (as you described above)

> I wrote the following rule, as the examples suggested:
>
> acl ourdomain domain .gns.com.br
> http_access allow ourdomain
>
This rule says that "The domain .gns.com.br is the only one that
your proxy can access"

e.g : you can access the URL http://www.gns.com.br/
but if you try http://www.gns.org.br/
then your request will be refused.

-- 
+++++++++++++++++++++++++++++++
+  Email  :  benarson@swh.sk  ++++++++++++++++++++++++
+  URL    :  http://www.drp.fmph.uniba.sk/~benarson  +
++++++++++++++++++++++++++++++++++++++++++++++++++++++