Hello!

I need to allow users access some sites without authorization.

If I write acl:


acl 1sk dstdomain 1sk.ru
http_access allow our_nets 1sk

it doesn't work
but if


acl 1sk dst  194.186.36.214
http_access allow our_nets 1sk

it works.

our_nets is
acl our_nets src 192.168.21.0/24 192.168.22.0/24 ....



It is not very good to have acls based on dst ip address, because it can be changed ;-)
Is it possible to use acl dstdomain in my situation?

Reply via email to