Acl public_allow src "public ip range here" (ie. 64.64.64.0/8) Acl public_deny src "public ip denied here" Acl private_allow src "private allowed here" Acl private_deny src "private ip denied here http_access allow public_allow http_access deny public_deny http_access allow private_allow http_access deny private_deny Everything is supposed to be in lower case..Outlook is trying to be "helpful.." -----Original Message----- From: david@xxxxxxxxxxxxxxxx [mailto:david@xxxxxxxxxxxxxxxx] Sent: Wednesday, April 22, 2009 11:33 AM To: squid-users@xxxxxxxxxxxxxxx Subject: Allow access to port 8080 from only one or two public IPs Hello Amos and fellow Squid users, I am running Squid 3.0. I would like to block access to port 8080 accept for one or two public IPs and one or two internal class C IPs (192.168.1.1/24). Please advise if you have some definite caveats to share. Thanks, David. OS: CentOS 5.2 Squid: 3.0 port 8080: Tomcat 5.5 web application (a blog).