-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Joost de Heer wrote: | | acl's are 'OR' lists, http_access rules are 'AND' lists. Your http_access | rule will never be true, because the destination domain is never | .doubleclick.net AND .valueclick.net AND .falkag.net. | | So what you want is | acl adclick dstdomain .doubleclick.net .valueclick.net .falkag.net | http_access deny adclick | ~ Ahh! The part I did not understand. It works as expected now. ~ Thank you. - -- jimoe at sohnen-moe dot com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (OS/2) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFDLv0ezTcr8Prq0ZMRAj3tAJ4ogkWs2y4dKVQI0KKtyntzZgZAqACgg+4W SQXndm4/mDnIVNZcSqdh1BE= =Rw7d -----END PGP SIGNATURE-----