ACL elements

• src: source (client) IP addresses
• dst: destination (server) IP addresses
• myip: the local IP address of a client's connection
• srcdomain: source (client) domain name
• dstdomain: destination (server) domain name
• srcdom_regex: source (client) regular expression pattern matching
• dstdom_regex: destination (server) regular expression pattern matching
• time: time of day, and day of week
• url_regex: URL regular expression pattern matching
• urlpath_regex: URL-path regular expression pattern matching, leaves out the protocol and hostname
• port: destination (server) port number
• myport: local port number that client connected to
• proto: transfer protocol (http, ftp, etc)
• method: HTTP request method (get, post, etc)
• browser: regular expression pattern matching on the request's user-agent header
• ident: string matching on the user's name
• ident_regex: regular expression pattern matching on the user's name
• src_as: source (client) Autonomous System number
• dst_as: destination (server) Autonomous System number
• proxy_auth: user authentication via external processes
• proxy_auth_regex: user authentication via external processes
• snmp_community: SNMP community string matching
• maxconn: a limit on the maximum number of connections from a single client IP address
• req_mime_type: regular expression pattern matching on the request content-type header
• arp: Ethernet (MAC) address matching