> > What is the definition of OFFICE ? > > request_header_access are fast ACL which will not wait for unavailable > > details to be fetched. > > Ah! proxy_auth :) > > Jenny acl OFFICE src 2.2.2.2 request_header_access User-Agent allow OFFICE request_header_access User-Agent deny all header_replace User-Agent BOGUS AGENT This works as expected when going direct. However, if there is a cache_peer, still the UA is replaced. Cache_peer logs show connection is coming with the replaced UA (cache_peer does not modify UA in its config). I must be missing something. Jenny