How can I allow the lines beneath, so the patterns .ico .crl will work without certification errors. 1352906047.969 0 172.16.4.254 TCP_DENIED/407 3937 GET http://mscrl.microsoft.com/pki/mscorp/crl/mswww(6).crl - NONE/- text/html 1352906047.981 0 172.16.4.254 TCP_DENIED/407 3975 GET http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl - NONE/- text/html 1352906047.992 0 172.16.4.254 TCP_DENIED/407 3998 GET http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl - NONE/- text/html 1352906048.006 0 172.16.4.254 TCP_DENIED/407 3947 GET http://crl.microsoft.com/pki/crl/products/CodeSigPCA.crl - NONE/- text/html 1352906048.017 0 172.16.4.254 TCP_DENIED/407 3954 GET http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl - NONE/- text/html 1352906048.029 0 172.16.4.254 TCP_DENIED/407 3930 GET http://crl.microsoft.com/pki/crl/products/WinPCA.crl - NONE/- text/html 1352906048.040 0 172.16.4.254 TCP_DENIED/407 3849 GET http://www.startssl.com/sfsca.crl - NONE/- text/html 1352906048.051 0 172.16.4.254 TCP_DENIED/407 3994 GET http://crl.microsoft.com/pki/crl/products/MicrosoftRootAuthority.crl - NONE/- text/html 1352906048.062 0 172.16.4.254 TCP_DENIED/407 3937 GET http://mscrl.microsoft.com/pki/mscorp/crl/mswww(5).crl - NONE/- text/html 1352906065.587 0 172.16.4.254 TCP_DENIED/407 3898 GET http://www.startpagina.nl/layouts/startpagina/favicon.ico - NONE/- text/html 1352906108.106 0 172.16.4.254 TCP_DENIED/407 3937 GET http://mscrl.microsoft.com/pki/mscorp/crl/mswww(6).crl - NONE/- text/html 1352906108.127 0 172.16.4.254 TCP_DENIED/407 3975 GET http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl - NONE/- text/html 1352906108.144 0 172.16.4.254 TCP_DENIED/407 3998 GET http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl - NONE/- text/html 1352906108.157 0 172.16.4.254 TCP_DENIED/407 3947 GET http://crl.microsoft.com/pki/crl/products/CodeSigPCA.crl - NONE/- text/html 1352906108.173 0 172.16.4.254 TCP_DENIED/407 3954 GET http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl - NONE/- text/html 1352906108.186 0 172.16.4.254 TCP_DENIED/407 3930 GET http://crl.microsoft.com/pki/crl/products/WinPCA.crl - NONE/- text/html 1352906108.202 0 172.16.4.254 TCP_DENIED/407 3849 GET http://www.startssl.com/sfsca.crl - NONE/- text/html 1352906108.216 0 172.16.4.254 TCP_DENIED/407 3994 GET http://crl.microsoft.com/pki/crl/products/MicrosoftRootAuthority.crl - NONE/- text/html 1352906108.230 0 172.16.4.254 TCP_DENIED/407 3937 GET http://mscrl.microsoft.com/pki/mscorp/crl/mswww(5).crl - NONE/- text/html 1352906117.713 3 172.16.4.254 TCP_DENIED/407 3938 GET http://www.experts-exchange.com/images/experts-exchange/favicon.ico - NONE/- text/html 1352906408.341 0 172.16.4.254 TCP_DENIED/407 3937 GET http://mscrl.microsoft.com/pki/mscorp/crl/mswww(6).crl - NONE/- text/html 1352906408.354 0 172.16.4.254 TCP_DENIED/407 3975 GET http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl - NONE/- text/html 1352906408.368 0 172.16.4.254 TCP_DENIED/407 3998 GET http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl - NONE/- text/html 1352906408.383 0 172.16.4.254 TCP_DENIED/407 3947 GET http://crl.microsoft.com/pki/crl/products/CodeSigPCA.crl - NONE/- text/html 1352906408.398 0 172.16.4.254 TCP_DENIED/407 3954 GET http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl - NONE/- text/html 1352906408.413 0 172.16.4.254 TCP_DENIED/407 3930 GET http://crl.microsoft.com/pki/crl/products/WinPCA.crl - NONE/- text/html 1352906408.427 0 172.16.4.254 TCP_DENIED/407 3849 GET http://www.startssl.com/sfsca.crl - NONE/- text/html 1352906408.443 0 172.16.4.254 TCP_DENIED/407 3994 GET http://crl.microsoft.com/pki/crl/products/MicrosoftRootAuthority.crl - NONE/- text/html 1352906408.455 0 172.16.4.254 TCP_DENIED/407 3937 GET http://mscrl.microsoft.com/pki/mscorp/crl/mswww(5).crl - NONE/- text/html
