Thanks Brian, Well spotted with the domain/cidr :) I changed the line <param name="apply-inbound-acl" value="domains"/> in the internal.xml with a new value, and changed the list to match but I still get the same 'Rejected by acl "domains"' error. And yes I reloaded the xml. :) Kevin Brian West wrote:
First off edit the profile to use your own custom ACL... not the domains one... secondly you'll have to use cidr= instead of domain=.
Domain= will search the user directory building an ACL list from all users with the cidr= attribute.
/b
On Aug 10, 2009, at 6:36 PM, Kevin Golding wrote:
acl.conf.xml file, and have put the following in it:
<configuration name="acl.conf" description="Network Lists"> <network-lists> <list name="domains" value="allow"> <node type="allow" domain="$${domain}"/> <node type="allow" domain="213.166.5.128/28"/> <node type="allow" domain="87.238.72.128/26"/> </list> </network-lists> </configuration>