acl to_trojan dst 208.72.169.38
http_access deny to_trojan

this is before the

http_access allow internal_network