Block a Domain but Allow One of Its Sub-Domains

Summary

Blocking a domain but allowing a sub URL.

Problem

I want to block a domain, but allow access to a sub-domain.

For example, block bbc.co.uk but allow bbc.co.uk/iplayer.

Solution

You use Guardian's policy ordering feature to do this. Policies that are higher up in the policy table, supersede those lower in the table.

1. Create a block policy for the full domain as part of a global or default block rule. Taking the example above, block bbc.co.uk.
2. Create an allow policy for the required sub-domain. Taking the example above, allow bbc.co.uk/iplayer.
   Note that you may need to create a custom category specifically for this sub-domain first. This is especially true if you are using a URL with parameters, such as
   mydomain.com?myparameters
3. From the Web filter policies table, move the allow policy from step 2 to be above the block policy from step 1.
   Policies that are higher up the table supersede policies lower down.