If I under stand you then, just *remove* the '*always_direct allow noproxy*' and the steps I have posted should work? does the order in which these appear in the squid.conf file: cache allow windowsupdate & cache deny noproxy . . . matter? I don't believe they should as they are defined more specifically in the acl. In other words, I wasn't sure if: acl noproxy dstdomain *.com* .net .org . . . would override: acl windowsupdate dstdomain *microsoft.com* acl windowsupdate dstdomain *.adobe.com* acl windowsupdate dstdomain *.java.com* acl windowsupdate dstdomain *.nvidia.com* Thanks -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/cache-dir-size-v-s-available-RAM-tp4661705p4661872.html Sent from the Squid - Users mailing list archive at Nabble.com.