[squid-users] Problem with acl and one ip address

Hi,
we want to deny access for a single ip,
but this ip is also in another access list.
As far as i understood the first rule that matches
is applied, but it doesn't work...
this is a part of our squid.conf.
It works, only this one ip still cann surf everywhere.

acl all src 0.0.0.0/0.0.0.0
# this ip should access only allowed sites:
acl test src 172.27.49.48/32
# but it's also in here:
acl surf_all src 172.27.49.0/24
acl surf_small src 172.27.35.0/24
acl sites dstdomain "/usr/local/squid/etc/erlaubt.url"
http_access allow test sites
http_access allow surf_small sites
http_access allow surf_all
http_access allow manager
http_access deny all

But he still can surf everywhere.
Why?
An what can I do?
it's squid 2.4 stable2 running under linux mdk kernel 2.4.8.

thanks
Rainer
Received on Mon Oct 29 2001 - 07:46:42 MST