When is the url_rewrite_program called? Is it before ACL matches occur? Or after the http_access tag is matched? I'm just trying to figure out the flow of events that occur. Looking for an answer like: 1) http_access is matched, if denied end 2) url_rewrite_program called 3) acls are matched a second time 4) http_access is matched a second time Thanks, David