Actually, I ended up doing this with one exception. I found in a FAQ that since 2.3 you have to put in a leading dot for this to work now. -----Original Message----- From: Mark Elsen [mailto:mark.elsen@xxxxxxxxx] Sent: Wednesday, January 25, 2006 4:23 PM To: Schaefer, Charles Cc: squid-users@xxxxxxxxxxxxxxx Subject: Re: squid.conf not blocking sites.... > I'm having an issue with a squid.conf file running on 2.5 in which the sites listed in the conf file as > > acl bad_site dstdomain www.badsite.com > http_access deny bad_site > > does not work. > >.... www.badsite.com is a host , not a domain , try acl bad_site dstdomain badsite.com M.