On Wed, Aug 29, 2007, Deephay wrote: > I think dstdomain would be enough, BTW, are there any other software > dedicated to this url filtering job? thanks! I'm using an external_acl helper which resembles something like squidguard to handle very large ACL lists. It has the added advantage of working great on SMP machines.. Adrian