Hello, I have the following ACLs: acl block_domain dstdomain "/opt/squid-master/etc/block.txt" http_access deny block_domain block.txt has the following content: # Blokkeer domein .gator.com .webads.nl .doubleclick.net The http_access rule is the first rule in the access rules, so there's no previous rule that could grant access. When I search for 'gator.com' in the access log, I see the following: 1143528173.138 1235254 10.36.74.44 TCP_DENIED/403 1318 POST http://gbs.gator.com/gbs/gbs.dll? - NONE/- text/html 1143528173.138 1160166 10.36.74.44 TCP_DENIED/403 1318 POST http://gbs.gator.com/gbs/gbs.dll? - NONE/- text/html 1143528173.138 783930 10.36.74.44 TCP_DENIED/403 1318 POST http://gbs.gator.com/gbs/gbs.dll? - NONE/- text/html 1143528173.138 708776 10.36.74.44 TCP_DENIED/403 1318 POST http://gbs.gator.com/gbs/gbs.dll? - NONE/- text/html 1143528173.138 859393 10.36.74.44 TCP_DENIED/403 1318 POST http://gbs.gator.com/gbs/gbs.dll? - NONE/- text/html 1143528173.138 1256918 10.36.74.44 TCP_DENIED/403 1306 POST http://rs.gator.com/rs.dll? - NONE/- text/html 1143528173.138 968166 10.36.74.44 TCP_DENIED/403 1318 POST http://gbs.gator.com/gbs/gbs.dll? - NONE/- text/html 1143528253.117 1 10.41.0.83 TCP_DENIED/403 1394 GET http://gatorcme.gator.com/gatorcme/autoupdate/installprecisiontime.exe? - NONE/- text/html 1143528253.143 1 10.41.0.83 TCP_DENIED/403 1380 GET http://gatorcme.gator.com/gatorcme/autoupdate/precisiontime.ini? - NONE/- text/html Why are the deny times for some of the requests so high? All these long denies come from one client by the way, is there something misconfigured at that client? Since this is a WAN proxy, I have no idea what that client is (local browser or site proxy), and I have no influence on its behaviour. Joost
