Amos Jeffries-2 wrote > This is how you do the exact same thing with only Squid instead of using > jesred: > > acl domains_to_redirect dstdomain > "/etc/squid3/to_redirect_program.acl" > acl netshar_regex url_regex "/etc/squid3/netshar_regex.acl" > deny_info 302:http://www.netshahr.com/website-unavailable/ > netshar_regex > adapted_http_access deny domains_to_redirect redirect_regex > > /etc/squid3/netshar_regex.acl contiains the regex patterns being checked > by jesred: > > ^http://(.+\.||)server.cn/ > ^http://cpe.management/ > ^http://wpad.domain.name/ > ^http://isatap.home/ > ^http://(.+\.||)scorecardresearch.com/ You are my hero . thanks . except the 302: everything works . i removed it . no problem with 307 . Just one problem . the hickup still occurs . also new log appears in cache.log and after average 3~4 hours squid crashes about 45 min after squid auto restart , i see abnormal "Largest file desc currently in use" . the most value i remember is about ~10000 File descriptor usage for squid: Maximum number of file descriptors: 32768 Largest file desc currently in use: 18882 Number of file desc currently in use: 7156 -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/IpIntercept-cc-137-NetfilterInterception-NF-getsockopt-SO-ORIGINAL-DST-failed-on-FD-4125-2-No-such-fy-tp4662558p4662618.html Sent from the Squid - Users mailing list archive at Nabble.com.