Ajuda Cisco

[mocosoft]

Alguem me sabe dizer porque é que isto não funciona.
______________________________________________

ip access-list extended naobloquear

permit ip host 192.168.0.2 any



class-map match-all classnaobloqueio

match access-group name naobloquear



class-map match-all STOP

match not class-map classnaobloqueio

match protocol http host "*facebook.com"

policy-map REGRA

class STOP

drop



interface 0/0

service-policy input REGRA
__________________________________________________________