I'm not sure but i use a dstdomain acl with a file like this : .google.com without last dot Or an bad usage or order of acl allow/deny your_acl -- View this message in context: http://www.nabble.com/acl-dstdomains-does-not-block%21-tp22863222p22864630.html Sent from the Squid - Users mailing list archive at Nabble.com.