acl blocksites dstdomain "/path/blocksites" acl filteredip src 192.168.0.101/255.55.255.255 http_access allow filteredip !blocksites