> acl my_net src 10.0.0.1/255.255.255.0 > acl USERA src 10.0.0.1/255.255.255.255 > acl UPLIMIT req_header Content-Length [5-9][0-9]{5,} And if the size is 10000000? That won't match that regex. acl UPLIMIT req_header Content-Length [5-9][0-9]{5} [0-9]{7,} (either 6 digits with a 5-9 at the begin, or 7 or more digits) Joost