Hi guys, trying to get rid of inktomi traffic server as our main proxy cache but we have a little bug. Basic layout: local-server + workstations ---> squid cache ---> Internet Squid Cache: Version 2.5.STABLE9-20050415 configure options: --prefix=/opt/squid --sysconfdir=/etc/opt/squid --localstatedir=/var/opt/squid --enable-default-err-language=English '--enable-err-languages=English French' --enable-ipf-transparent OS: Solaris 9 All traffic goes to the cache (no way to change this for now). The problem is that some local servers in our local domain (but not all of them) use NTLM authentication and after reading some posts, I found out that *its just not proxyable* by squid. How can I bypass without using some sort of technique on the client side. Tried using always_direct + acl but I coudl'nt make it work acl HQsites1 url_regex test.test.com acl HQsites2 urlpath_regex test.test.com acl HQsites3 dstdomain .test.com always_direct allow HQsites1 always_direct allow HQsites2 always_direct allow HQsites3 Where using websense so changing proxy solution is NOT a acceptable (cause websense only supports Sun Microsystem SunOne, Inktomi traffic server AND squid. BTW this particular problem doesn't appear when using inktomi traffic server. If you need more of the config file don't hesitate to ask. Thanks for the help. Eric