Looks like I found a workaround: To use %SRC %SRCPORT. Which avoids (at least up to now) identical key. So it looks like a bug in squid. This _might_ be part of the problem: 2016/10/26 06:11:28.417 kid1| 82,4| external_acl.cc(816) aclMatchExternal: entry = { date=1477480288, result=DENIED tag= log= } As "date=1477480288" , not taking into account multiple requests during same second, _and_ identical key (%SRC) this might trigger a problem. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/external-acl-type-problem-tp4680203p4680306.html Sent from the Squid - Users mailing list archive at Nabble.com. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users