On 5/10/07, Vadim Pushkin <[EMAIL PROTECTED]> wrote:
I am trying to modify my ACL to prevent a specific IP address within a range
already defined in http_access and acl.

Where within this do I state *not*  (!) 192.168.1.200?

Thank you.

acl NET_ONE src 192.168.0.0/16

or

http_access allow NET_ONE

acl srcdeny src 192.168.1.200
acl NET_ONE src 192.168.0.0/16

# and then

# the specific deny rule must be ABOVE the allow rule
http_access deny srcdeny
http_access allow NET_ONE

--
   /kinkie

Reply via email to