i'm asked by our Manager to block specific site let us asume http://www.block.com, as normal i logged into the router and start with these 3 lines
access-list 110 deny tcp any host http://www.block.com eq www
(for other site to be accessable)
access-list 110 permit tcp any any eq www
in the interface that facing the ISP
ip access-group 110 out
it's successfully block http://www.block.com and accordingly all other sites in the web.
what could be wrong, please i need advice.