Dear Jenny and Amos, I thought it worth mentioning that I too am having troubles with the ACL processing of the "request_header_access User-Agent" configuration directive. It seems like Jenny's issue is the same one I am seeing. Using a "src" ACL in the directive doesn't work when you have a cache peer. The ACL is only ever checked to see if the IP address 255.255.255.255 exists in the list. I know this was only reported recently, but I wanted to know if there was a fix in the works or if Amos is still waiting for a fix to be submitted. Thanks and Best Regards, Sean Butler