Hi , I tried to write a timebased acl for for testing at special time of day but it didnt seem to work. I tried to block the access to CNN using dstdomain .cnn.com. My aim is to allow facebook at special times of the day at lunch time for example. Can someone provide me a working rule for which will allow access facebook access at 12.30-13.30 ? Regards