thanks very much, i just read some tutorial about blocking skype, used this and... doesn't work. thanks!http_access deny CONNECT numeric_addr to block skype through proxy - it has to block CONNECT when target address is numeric.Then you should use dstdom_regex, not urlpath_regex.. CONNECT does not have an URL-path, only a hostname and port.. Regards Henrik