In access contorl list







it mean allow all user clinet to access internet but all user deny to access the 192.168.0.1
but


if want to deny the access for a src group (i.e. clinet user), it need to indicate "http_access deny" before "http_access allow".