I try to make the following rules
1 group authorized to access to one url ( rule A )
1 group authorised to access to all internet ( rule B )
and the others authorized to a list of urls ( rule C )
blocked sites ( rule D )
My problem is that some addresses Ip can be on twice groups
( for example  one address ip is concerned by rule A and rule B  and
another concerned
rule A and rule C )

my acl is the following

acl {
 ruleA {
pass urlA none
redirect http://redirectA
}

ruleB {
pass !ruleD all
}

ruleC {
pass urlC none
redirect http://redirectB
}

default  {
pass none
redirect http://default
}
}

But the acl don't functions properly , is my logic is correct ?
What is wrong ?

Thank you very much for any clue

Reply via email to