Thanks for your analysis Amos. As you can tell I'm still figuring this stuff out. HTTPS is working now but HTTP is not, not sure what I'm doing wrong. I tried my best to understand your comments and now have the following config: squid.conf visible_hostname squid acl localnet src 10.0.0.0/8 acl SSL_ports port 443 acl Safe_ports port 80 acl Safe_ports port 443 http_access deny !Safe_ports http_access allow localhost manager http_access deny manager acl whitelist dstdomain .example.com http_access allow whitelist http_access allow localnet http_access allow localhost http_access deny all http_port 3128 https_port 3129 intercept ssl-bump cert=/etc/squid/squid.pem ssl_bump peek all acl tls_whitelist ssl::server_name .example.com ssl_bump splice tls_whitelist ssl_bump terminate all coredump_dir /var/cache/squid Thanks and let me know if i have misunderstood your amendments. Thanks again, David -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users