acl subnet1 src 192.168.1.0/255.255.255.0
acl client1 src 192.168.1.38/255.255.255.255


http_access allow client1
http_access deny subnet1