Hi, Richard Pokorný FYI the below is my configure file, any body can access intranet, but AuthorizedUsers can surf on internet acl AuthorizedUsers proxy_auth REQUIRED acl company-intra_clients src 10.160.48.0/255.255.252.0 acl msnmessenger url_regex -i gateway.dll acl Intranet dst 10.0.0.0/8 172.160.0.0/12 192.168.0.0/16 172.24.1.0/24 172.16.1.0/24 192.9.200.0/24 198.200.191.0/24 99.245.74.0/24 199.245.74.0/24 199.245.75.0/24 acl OnlyIpOne max_user_ip 1 http_access allowcompany-intra_clients Intranet http_access deny msnmessenger http_access deny deny_sites http_access deny deny_users http_access deny OnlyIpOne http_access allow AuthorizedUsers http_access deny all http_reply_access allow all Seewo hello, please can you help me (write few lines of code?:-) below.. i have squid configured with ACL http access allow etc.. to some IPs - so some computers can go to internet and other to nowhere.. but i want now to have for all computers access to intranet (e.g. addressses *.company-intra.net) and for some to internet as it is now.. how to do it? thank you -- Richard Pokorný