> In that case the config you posted is all correct. You have a > global allow for localnet before domini_bloccati is ever > tested so it can't even be a bad domain entry in there. > > It must be something else doing the denial. Thanks for double-replying, I looked at the access.log file and I see only this: 1243437102.390 2 172.16.16.37 TCP_MISS/503 2458 GET http://teo/ - DIRECT/teo text/html 1243437102.494 1 172.16.16.37 TCP_MISS/503 2459 GET http://teo/favicon.ico - DIRECT/teo text/html 1243437105.496 1 172.16.16.37 TCP_MISS/503 2491 GET http://teo/favicon.ico - DIRECT/teo text/html It's clear to me that I'm getting TCP_MISS because in my network nor elsewhere there is any "teo" host like the above. What makes me wonder is *why* when I unset the proxy and I type "teo" in the address bar (Firefox), I get: http://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1 &q=teo Any help will be appreciated. Flavio Boniforti PIRAMIDE INFORMATICA SAGL Via Ballerini 21 6600 Locarno Switzerland Phone: +41 91 751 68 81 Fax: +41 91 751 69 14 URL: http://www.piramide.ch E-mail: flavio@xxxxxxxxxxx