求助squid禁用qq问题

blackthought

squid配置普通proxy

acl denydomain dstdomain .qq.com
acl CONNECT method CONNECT
http_access deny denydomain

采用以上配置后，*.qq.com的网站全部Access Denied.
但为何用客户端可以成功登录，以下为客户端登录后的日志
里面都denied了，客户端还是登录成功了
我现在只要禁客户端，放开webqq，请问是不是要加CONNECT
http_access deny CONNECT denydomain
请教

r292471674.364     19 192.168.21.238 TCP_DENIED/403 1328 CONNECT 121.14.96.44:80 - NONE/- text/html
1292471686.664     14 192.168.21.238 TCP_DENIED/403 1326 CONNECT qiye.qq.com:80 - NONE/- text/html
1292471687.383     15 192.168.21.238 TCP_DENIED/403 1324 CONNECT qun.qq.com:80 - NONE/- text/html
1292471687.660     14 192.168.21.238 TCP_DENIED/403 1340 CONNECT snspt.qzone.qq.com:80 - NONE/- text/html
1292471687.680     34 192.168.21.238 TCP_DENIED/403 1332 CONNECT 112.90.136.120:80 - NONE/- text/html
1292471687.705     18 192.168.21.238 TCP_DENIED/403 1332 CONNECT 112.90.136.119:80 - NONE/- text/html
1292471696.022     15 192.168.21.238 TCP_DENIED/403 1332 CONNECT adshmct.qq.com:80 - NONE/- text/html
1292471714.305     14 192.168.21.238 TCP_DENIED/403 1336 CONNECT httpring.qq.com:443 - NONE/- text/html
1292471716.053     14 192.168.21.238 TCP_DENIED/403 1330 CONNECT fodder.qq.com:80 - NONE/- text/html