acl to_trojan dst 208.72.169.38 http_access deny to_trojan this is before the http_access allow internal_network

continue reading.....