On 1/11/21 9:16 AM, Eliezer Croitoru wrote: > I have in my logs: > 1610372657.529 0 - TCP_DENIED/403 3638 GET > http://crl.kaspersky.com/aia/KSNGlobalRootCAECC.crt - HIER_NONE/- > text/html – > And it means probably that squid is generating these requests. > What ACL can I use to allow this? To match internal requests, consider using the "internal" initiator with the transaction_initiator ACL. Alex. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users