>>> Definitely the regex bits then. >> >> If you post the whitelist.no_limit we are able to see if there is >> room for improvement. >> Usually there is. > >FYI he did. It was two domain names :( > Ok here is what I did after considering your replies: acl whitelist.no_limit dstdomain "/etc/squid3/etc/whitelist.no_limit" #cat /etc/squid3/etc/whitelist.no_limit #www.microsoft.com #cdimage.debian.org delay_pools 1 delay_class 1 2 delay_parameters 1 3145728/3145728 51200/51200 delay_access 1 allow !whitelist.no_limit delay_access 1 deny all I removed the line working on a authentication group to limit the risk of potential errors. I replaced the regex acl by a dstdomain one (now ther no more ambiguity concerning wether or the Regex works). With the above configuration, the 50ko/s limitation per user is applied even on www.microsoft.com and cdimage.debian.org. Thank in advance for your help, Best Regards, Marc.