Hello guys!
Hi
src kineska_src {
ip 10.1.0.1
ip 10.1.0.223
}
[CUT]
dest kineska_dest {
domainlist kineska
}
acl {
kineska_src {
pass kineska_dest none
}
[CUT]
Users with IPs 10.1.0.1 and 10.1.0.223 shouldn't access domains in file 'kineska', but they can.
I suppose the correct configuration for your needs is:
acl {
kineska_src {
pass !kineska_dest all
}
Bye
Francesco
