On Fri, 2 Jan 2004, Eric Geater 12/12/03 wrote:
> I need to block an IP address. So far I've read that I can't enter it
> into my dstdomain acl because it's not a FQDN. Fine, but the "dst" ACL
> type expects an IP address AND subnet mask, which isn't used for web
> addresses. Anyone who can clarify this for me would be a hero, now that
> we seem to be getting more of those false URLs in carefully constructed
> emails lately.
The netmask is optional. If you just write "... dst 1.2.3.4" it will work
the way you expect.
Duane W.