Hi, I have necessity of:
- permit always http access only two ip addresses of my LAN (10.0.0.1 and
10.0.0.2)
- from 13:00 to 14:00 permit all ip addresses of my LAN to http access
- permit always all ip addresses of my LAN to use mail (port 25 and 110)
..but as I make to merge more acls ??
I think that:
acl all src 0.0.0.0/0.0.0.0
acl local_net src 10.0.0.0/255.255.255.0
acl local
acl ipok1 10.0.0.1/255.255.255.255
acl ipok2 10.0.0.2/255.255.255.255
acl Safe_ports port 25 110
acl timeok time 13:00-14:00
http_acceess deny !Safe_ports
http_access deny !ipok1, !ipok2
.. and then ??
..sorry for my confusion !
thanks.
------
Salvatore.
