your best config should be like this acl ur_foo dstdomain .foobar.org http_access allow ur_foo http_access deny all now everyone cant access site other than foobar.org and its subdomains --- Maykel Moya <moya@xxxxxxxxxxxxxx> wrote: > With this setup > > -- > acl ur_foo url_regex www.foobar.org > > http_access allow ur_foo > http_access deny all > -- > > my users can bypass the access entries requesting > www.notallowed.com/?www.foobar.org > > the clear solution for me is to force the string www.foobar.org to be > at > the beggining of the request > > acl ur_foo url_regex ^www.foobar.org > > but that way I can't access www.foobar.org. > > Do exists a workaround for this? > > Regards, > maykel > > regards, Pudjo __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com