Argh. I think it works now :) It still prompts, but only just before showing the update list. hm. weird. But anyway, it seems like it runs pretty good damn faster. Thanks. Old you big one. >> acl win1 dstdomain http://*.update.microsoft.com > > No, protocol shouldn't be in a dstdomain acl. The correct acl is: > > acl win1 dstdomain .update.microsoft.com > > If you want the protocol too you need the 'proto' acl type. > > Joost > >
