Note that I also tried adding: acl alldest dst 0.0.0.0/0.0.0.0 http_access allow alldest ... with the same result