On 5/10/07, Vadim Pushkin <wiskbroom@xxxxxxxxxxx> wrote:
I am trying to modify my ACL to prevent a specific IP address within a range already defined in http_access and acl. Where within this do I state *not* (!) 192.168.1.200? Thank you. acl NET_ONE src 192.168.0.0/16 or http_access allow NET_ONE
acl srcdeny src 192.168.1.200 acl NET_ONE src 192.168.0.0/16 # and then # the specific deny rule must be ABOVE the allow rule http_access deny srcdeny http_access allow NET_ONE -- /kinkie
