Hi everyone, I'm having a problem. I wanted to filter social networks as blue with F on a specific Windows desktop installed on an Apple computer, and it's not filtering correctly through the social network's ACL. What else could I add to ensure the ACL correctly filters the HTTP, HTTPS, and HTTP/3 – QUIC protocols? It's worth mentioning that only that device has this problem.
Note: I have a Cisco 2911 router.
ip access-list extended BLOCK_FB_IG_WEB
mark permit whatsapp
permit tcp any 157.240.25.0 0.0.0.255 eq 443
permit tcp any 157.240.14.0 0.0.0.255 eq 443
permit udp any 157.240.25.0 0.0.0.255 eq 3478
permit udp any 157.240.25.0 0.0.0.255 eq 5349
deny tcp any 31.13.24.0 0.0.7.255 eq www
deny tcp any 31.13.24.0 0.0.7.255 eq 443
deny tcp any 31.13.64.0 0.0.63.255 eq www
deny tcp any 31.13.64.0 0.0.63.255 eq 443
deny tcp any 66.220.144.0 0.0.15.255 eq www
deny tcp any 66.220.144.0 0.0.15.255 eq 443
deny tcp any 69.171.224.0 0.0.31.255 eq www
deny tcp any 69.171.224.0 0.0.31.255 eq 443
deny tcp any 129.134.0.0 0.0.255.255 eq www
deny tcp any 129.134.0.0 0.0.255.255 eq 443
deny tcp any 157.240.0.0 0.0.255.255 eq www
deny tcp any 157.240.0.0 0.0.255.255 eq 443
deny tcp any 173.252.64.0 0.0.63.255 eq www
deny tcp any 173.252.64.0 0.0.63.255 eq 443
deny tcp any 185.60.216.0 0.0.3.255 eq www
deny tcp any 185.60.216.0 0.0.3.255 eq 443
deny tcp any 185.89.216.0 0.0.3.255 eq www
deny tcp any 185.89.216.0 0.0.3.255 eq 443
remark QUIC / HTTP-3 (UDP 443) ---
deny udp any 31.13.24.0 0.0.7.255 eq 443
deny udp any 31.13.64.0 0.0.63.255 eq 443
deny udp any 66.220.144.0 0.0.15.255 eq 443
deny udp any 69.171.224.0 0.0.31.255 eq 443
deny udp any 129.134.0.0 0.0.255.255 eq 443
deny udp any 157.240.0.0 0.0.255.255 eq 443
deny udp any 173.252.64.0 0.0.63.255 eq 443
deny udp any 185.60.216.0 0.0.3.255 eq 443
deny udp any 185.89.216.0 0.0.3.255 eq 443
permit ip any any
