mesartwell 写道: > I just setup a squid proxy server and have blocked all web access except for > a whitelist of acceptable sites. On the whitelist I have .gov, which I > intended to allow users to get to all sites ending in .gov. However this > gives access to unintended sites, like 'www.screwthegovernment.com'. Is it > possible to specify that .gov must be the top level domain? Thanks. You may need a correct regex for dstdomain. How about: acl GOV dstdom_regex \.gov$ ?