This is interesting; why would *commenting out*: > acl school dstdomain .redeemer.ab.ca > acl school dstdomain .home.fc make it work? I wanted to use > .redeemer.ab.ca as both > redeemer.ab.ca > & > powerschool.redeemer.ab.ca are valid domain (and subdomains). Was I not to use 'dstdomain' in the acl? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/cache-allow-all-AND-cache-deny-school-not-working-tp4661884p4661885.html Sent from the Squid - Users mailing list archive at Nabble.com.