With some help in the past from the mailing list, I was able to setup a squid proxy server to handle traffic for various web sites for the company. Of course, they want to rock the cradle and use Lotus Notes Traveler remotely. I checked out the list and found some posts related to Traveler and port 8642 traffic. But I think the existing rules that I have in place for web traffic is stepping on the rules I have for the Traveler traffic. Here is the squid configuration related to port 80 and 8642 traffic: ##### # HTTP Web Traffic # Lotus Notes Traveler Service http_port 80 accel vhost http_port 8642 accel vhost # NEW RULE ##### # Web Server Proxy # Lotus Notes Traveler Proxy cache_peer 172.21.AAA.BBB parent 80 0 no-query originserver round-robin login=PASS name=webserver1 cache_peer 172.21.CCC.DDD parent 80 0 no-query originserver round-robin login=PASS name=webserver2 cache_peer 172.21.EEE.FFF parent 8642 0 no-query originserver name=notestraveler # NEW RULE ##### # acl mainSite dstdomain www.abc.com acl mailServer dstdomain notestraveler.abc.com # NEW RULE ###### # cache_peer_access notestraveler allow mailServer # NEW RULE cache_peer_access notestraveler deny all # NEW RULE # never_direct allow mailServer # NEW RULE http_access allow mailServer # NEW RULE ##### # cache_peer_access webserver1 allow mainSite cache_peer_access webserver1 deny all cache_peer_access webserver2 allow mainSite cache_peer_access webserver2 deny all # http_access allow mainSite http_access deny !mainSite !mailServer # deny_info http://www.abc.com/ mainSite As I said...I had everything working without any problems for the port 80 traffic. Not sure if I put the rules related to 8642 in the wrong place or if the http rules are screwing me up. Checking the squid access log, I'm getting TCP_DENEID and return code 403 Here is the URL being accessed, based on the log http://notestraveler.abc.com/servlet/traveler/Microsoft-Server-ActiveSync? Any help would be greatly appreciated. THANKS