You could generate the ACLs from a database into a text file and configure your Squids to use these external acl text files. Then its just a matter of fetching the files (via http/https/scp/sftp/whatever) periodically and running squid -k configure if the files have changed. I've done this a few times with a little bit of shell scripting. Adrian