> > sir > > i blocked pattern using.... > > acl block url_regex -i cgi-bin/index.cgi > > it worked fine if user write : > http://www.chickenbump.com/cgi-bin/index.cgi > > but when user write : https://www.chickenbump.com/cgi-bin/index.cgi > the website opens > i know they are accessing thru different port... > i tried with https_access deny block but it wont worked > I think you have an unmentioned ACL which tests the domain. I think that third ACL only tests: acl aclname dstdomain chickenbump.com The solution there is to test "dstdomain .chickenbump.com" (notice the starting dot) so as to pick up the sub-domains also. Amos