So I have put as you suggested and get this in the access.log TCP_DENIED/403 1833 CONNECT mail.google.com:443 - NONE/- text/html On Wed, Dec 15, 2010 at 11:31 AM, Aaron Drever <addrever@xxxxxxxxx> wrote: > That didn't work:( > > On Wed, Dec 15, 2010 at 10:28 AM, Aaron Drever <addrever@xxxxxxxxx> wrote: >> Thanks Ralf. >> >> I'll give that a try and let you know. >> >> On Wed, Dec 15, 2010 at 10:22 AM, Ralf Hildebrandt >> <Ralf.Hildebrandt@xxxxxxxxxx> wrote: >>> * Ralf Hildebrandt <Ralf.Hildebrandt@xxxxxxxxxx>: >>>> * Aaron Drever <addrever@xxxxxxxxx>: >>>> > Hello, >>>> > >>>> > I'm currently looking to implement a rule that allows people behind >>>> > the proxy to access a specific URL. In my case the URL is >>>> > https://mail.google.com/a/domain.tld. >>>> > >>>> > We are using GApps, but I don't want them to be able to use >>>> > mail.google.com to access typical gmail. >>>> > >>>> > I used: >>>> > >>>> > acl Google url_regex -i ^https://mail.google.com/a/domain.tld$ >>>> > http_access allow Google >>>> >>>> Where's the deny rule? >>> >>> So I'd guess you need: >>> >>> acl gmail url_regex -i ^https://mail.google.com/" >>> acl custom_google url_regex -i ^https://mail.google.com/a/domain.tld$ >>> http_access allow custom_google >>> http_access deny gmail >>> >>> -- >>> Ralf Hildebrandt >>> Geschäftsbereich IT | Abteilung Netzwerk >>> Charité - Universitätsmedizin Berlin >>> Campus Benjamin Franklin >>> Hindenburgdamm 30 | D-12203 Berlin >>> Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 >>> ralf.hildebrandt@xxxxxxxxxx | http://www.charite.de >>> >>> >> >> >> >> -- >> Aaron Drever >> > > > > -- > Aaron Drever > -- Aaron Drever