Hello Squid Folks, Here is an excerpt from squid.conf.documented: # TAG: request_header_access # Usage: request_header_access header_name allow|deny [!]aclname ... This seems to work only as: request_header_access User-Agent deny all Why can't I do: request_header_access User-Agent deny all !OFFICE or request_header_access User-Agent allow OFFICE1 request_header_access User-Agent allow OFFICE2 request_header_access User-Agent deny all It just does not allow OFFICE through without modification on (header_replace User-Agent). This is driving me crazy. I cannot modify user-agents of our executives. Thank you, Jennt