Time for action – constructing simple ACLs
Let's construct an access control list for the domain name example.com:
acl example_site dstdomain example.com
In this code, example_site is the name of the ACL with type dstdomain, which reflects that the value, example.com, is the domain name.
Now if we want to construct an access control list which can cover a lot of example websites, we have the following three possible ways of doing it:
Values on a single line: We can specify all the possible values on a single line:
acl example_sites dstdomain example.com example.net example.org
This works fine as long as there are only a few values.
Values on multiple lines: In case the list of values that we want to specify grows significantly, we can split the list and pass values on multiple lines:
acl example_sites dstdomain example.com example.net acl example_sites dstdomain example.org
Values from a file: If case the number of values we want to specify is quite large, we can put them in a dedicated file and...