<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1493763544552_11654">Hi</div><div id="yui_3_16_0_ym19_1_1493763544552_11654"><br></div><div id="yui_3_16_0_ym19_1_1493763544552_11654">I am trying to limit the out bound connection based on list of domain names defined</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">in srcdomain and dstdomain. </div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">Here is acl :</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">acl From_Source_Domains srcdomain domain1 domain2 domain3</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">acl To_Destination_Domains dstdomain domain4 domain5 domain6</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">Now some web site says below considered OR and it is working for me:</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">http_access allow From_Source_Domains</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">http_access allow To_Destination_Domains</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">And some web sites saying below considered AND but it is not working for me:</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">http_access allow From_Source_Domains To_Destination_Domains</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">I am assuming since I have not allowed any port, then port should be disabled</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">but it is not, on OR of the src and dst domains.</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">If add </div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">acl http_port 80 </div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">http_access allow http_port</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">Then it allow traffic from any source to any destination if port is 80.</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">Kind of confusing and need a bit of help.</div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1493763544552_11654" dir="ltr">Thanks</div></div></body></html>