Hi: I tested the issue. acl down urlpath_regex -i \.exe$ http_access deny dow The two lines enough to prevent download from www.download.com. example : URL: http://dw.com.com/redir?pid=7822541&merid=53499&mfgid=53499<ype=dl_dlnow&lop=link&edId=3&siteId=4&oId=3040-2112_4-7822541&ontId=2112_4&destUrl=http://www.download.com%2F3001-2112_4-7822541.html following message is the HTTP Header GET ftp://ftp.3com.com/pub/nic/3c90x/3c90xn1.exe HTTP/1.0 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: ftp.3com.com:21 Proxy-Connection: Keep-Alive Proxy-Authorization: Basic dHhqOnR4ag== HTTP/1.0 403 Forbidden Server: squid/2.5.STABLE10 Mime-Version: 1.0 Date: Thu, 09 Mar 2006 10:04:32 GMT Content-Type: text/html Content-Length: 1093 Expires: Thu, 09 Mar 2006 10:04:32 GMT X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from none Proxy-Connection: keep-alive ----- Original Message ----- From: <ammads@xxxxxxxxxxxxxxxxxx> To: <squid-users@xxxxxxxxxxxxxxx> Sent: Thursday, March 09, 2006 3:42 PM Subject: blocking software to download >i used > acl software url_pathregex -i \.exe?$ > > http_access deny software > > > it is working proprely and blocking exe from all websites. but getting > problem , that any one can download softwares from http://www.download.com > i want to block downloading but dont want to block websites > > >