That shows a clean parse of the config. Though you still have the cache_peer configuration not doing any TLS/SSL and the "deny all" access permission above your custom access controls. Amos