Brian Phillips wrote:
Shouldn't this
acl accesses_to_apps dstdomain 192.168.3.101 proxy
http_access allow accesses_to_apps !our_networks
be:
acl accesses_to_apps1 dst 192.168.3.101/32
acl accesses_to_apps2 dstdomain proxy
http_access allow accesses_to_apps1
http_access allow accesses_to_apps2
http_access deny all
?
I am not sure, but I don't think you do ip's with dstdomain...
That's it! I didn't realize that I was using dstdomain and not dst....
Feeling like a moron now.. Seemed so obvious when you highlighted it.
Thanks a bundle Brian
debug_options ALL,1 33,2
is also helpful when tracking down ACLs
Brian
