On Fri, 2 Jan 2004, Eric Geater 12/12/03 wrote:

> I need to block an IP address.  So far I've read that I can't enter it
> into my dstdomain acl because it's not a FQDN.  Fine, but the "dst" ACL
> type expects an IP address AND subnet mask, which isn't used for web
> addresses.  Anyone who can clarify this for me would be a hero, now that
> we seem to be getting more of those false URLs in carefully constructed
> emails lately.

The netmask is optional.  If you just write "... dst 1.2.3.4" it will work
the way you expect.

Duane W.

Reply via email to