Time for action – constructing simple ACLs
Let's construct an access control list for the domain name example.com
:
acl example_site dstdomain example.com
In this code, example_site
is the name of the ACL with type dstdomain
, which reflects that the value, example.com
, is the domain name.
Now if we want to construct an access control list which can cover a lot of example websites, we have the following three possible ways of doing it:
Values on a single line: We can specify all the possible values on a single line:
acl example_sites dstdomain example.com example.net example.org
This works fine as long as there are only a few values.
Values on multiple lines: In case the list of values that we want to specify grows significantly, we can split the list and pass values on multiple lines:
acl example_sites dstdomain example.com example.net acl example_sites dstdomain example.org
Values from a file: If case the number of values we want to specify is quite large, we can put them in a dedicated file and...