EFW 2.4 - Cannot use multple content filters in http proxy

[Guest]

[S3@N]

Using EFW 2.4 Community Edition I have set up two contentfilter profiles.  These each have one blacklisted site specified.  I then set up 2 access policies, one for each filter with ANY source, destination and user agent, always active an no authentication.  In testing I find that whichever filter is listed in the first access policy takes effect, the second does not - i.e. I am able to reach a site blacklisted by the second access policy in the list.

Is this a bug, limitation or have I misconfigured somewhere?  If so what should I look at?

Thanks

[mrkroket]

First rule is allowing your domains blacklisted in contentfilter2. It's a misconfig because rule #2 makes no sense.
Rule 1 with contentfilter1 means: Allow all traffic except those blacklisted on the contentfilter1.
As soon as one HTTP request meets a rule, it stops analyzing further rules.
So rule 2 will never be fired, rule 1 "eats" all the traffic.

[S3@N]

OK - makes sense.  My (incorrect) assumption was that it would try rules in turn until it was blocked.  So I guess that any rule that qualifies w.r.t source, destination, agent, authentication and time will be tried and the traffic passed or blocked depending on the result. 

Thanks for the reply!

[whoiam55]

OK - makes sense.  My (incorrect) assumption

That's why they say, don't assume, it make fool of both coz assume literally means /U/ME