Hello guys!
Hi

src kineska_src {
                ip 10.1.0.1
                ip 10.1.0.223
}
[CUT]

dest kineska_dest {
                  domainlist kineska
}

acl {
       kineska_src {
                    pass kineska_dest none
       }
[CUT]

Users with IPs 10.1.0.1 and 10.1.0.223 shouldn't access domains in
file 'kineska', but they can.

I suppose the correct configuration for your needs is:

acl {
       kineska_src {
                   pass !kineska_dest all
}

Bye
Francesco




Reply via email to