> Rob, > > Thanks for the answer. > > Is there a way to remove the established connection? I have read > ctnetlink seems can do this job, but my system is with 2.6.8.1. > ctnetlink is not there. I also can not find the install package in > the web. It seems to be in POM... But I've never used it; don't know how to put it to work. http://www.netfilter.org/projects/patch-o-matic/pom-extra.html#pom-extra -ctnetlink > We use that proxy as a url filter, so we need it to be able to be > disabled/enabled. Sorry, I don't understand that. IMHO if Squid should filter urls, why would you turn it off ? Gr, Rob