diff --git a/CHANGELOG.md b/CHANGELOG.md
index b600215f..00369813 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ The **patch** part changes incrementally at each release.
 * squid: minifirewall main file is configurable
 
 ### Changed
+* squid: better replacement in minifirewall config
 
 ### Fixed
 
diff --git a/squid/tasks/minifirewall.yml b/squid/tasks/minifirewall.yml
index 8d018142..44c7ada6 100644
--- a/squid/tasks/minifirewall.yml
+++ b/squid/tasks/minifirewall.yml
@@ -17,6 +17,7 @@
     lineinfile:
       dest: "{{ minifirewall_main_file }}"
       line: "HTTPSITES='0.0.0.0/0'"
+      regexp: "HTTPSITES='.*'"
       insertafter: "^#HTTPSITES="
     notify: restart minifirewall