rewrite filter for squid