I have only "one" Squid parent proxy (PARENT) which is connected to both internal and external network; on this server it's also installed "named" service. My child proxy (CHILD) sends always dns query to its PARENT cache. resolv.conf of CHILD cache: 19.200.233.69 (this address is parent cache where it's also installed dns service) squid.conf of CHILD cache: ... acl nai_list url_regex ^ftp://ftp\.mcafee\.com/pub/datfiles/english/$ acl audiosp rep_mime_type -i ^application/x-mms-framed acl audiosp rep_mime_type -i ^application/x-mms-framed$ acl wwwintsite dst 10.3.2.1/255.255.255.255 ... cache_peer 19.200.233.69 parent 3128 3130 no-query no-digest never_direct deny wwwintsite never_direct allow all I saw Squid FAQ and I think problem is my acl but I'd like having confirmation. 1- If I define a name of site in acl, child Squid sends "dns query" to parent to resolve it ? Is this the reason ? I think for checking acl squid must before traslate it into ip adress ? 2- If yes, can I move these acl to parent cache ? Naviga e telefona senza limiti con Tiscali Scopri le promozioni Tiscali adsl: navighi e telefoni senza canone Telecom http://abbonati.tiscali.it/adsl/