diff --git a/spec/classes/osg_squid_spec.rb b/spec/classes/osg_squid_spec.rb
index 8dba03f..e40ae2b 100644
--- a/spec/classes/osg_squid_spec.rb
+++ b/spec/classes/osg_squid_spec.rb
@@ -89,6 +89,8 @@
           'uncomment("acl MAJOR_CVMFS")',
           'insertline("^# http_access deny !RESTRICT_DEST", "http_access allow MAJOR_CVMFS")',
           'insertline("^# max_filedescriptors 0", "max_filedescriptors 0")',
+          'insertline("# INSERT YOUR OWN RULE", "acl URN proto URN")',
+          'insertline("# INSERT YOUR OWN RULE", "http_access deny URN")',
           'print',
           '}\'',
         ])
diff --git a/templates/squid/customize.sh.erb b/templates/squid/customize.sh.erb
index 6437628..e897316 100755
--- a/templates/squid/customize.sh.erb
+++ b/templates/squid/customize.sh.erb
@@ -20,5 +20,7 @@ uncomment("acl MAJOR_CVMFS")
 insertline("^# http_access deny !RESTRICT_DEST", "http_access allow MAJOR_CVMFS")
 <%- end -%>
 insertline("^# max_filedescriptors 0", "max_filedescriptors <%= @max_filedescriptors %>")
+insertline("# INSERT YOUR OWN RULE", "acl URN proto URN")
+insertline("# INSERT YOUR OWN RULE", "http_access deny URN")
 print
 }'