Hi, I think what you want is: acl mynet src 192.168.100.0/24 acl win1 dstdomain http://*.update.microsoft.com or acl win1 dst 207.46.144.0/255.255.255.0 http_access allow mynet win1 I hope that help you. Regards, Renato. -----Mensagem original----- De: Lasse Mørk [mailto:debian@xxxxxxxx] Enviada em: terça-feira, 16 de agosto de 2005 10:31 Para: sanguis@xxxxxxxxx Cc: squid-users@xxxxxxxxxxxxxxx Assunto: Re: Windows update hangs ok. I've putted at the end of squid.conf :( Then tried to move it up a little. Now i looks like this: --snip-- acl WIN1 dstdomain http://*.update.microsoft.com acl WIN2 dstdomain http://*.windowsupdate.microsoft.com acl WIN3 dstdomain http://download.windowsupdate.com acl WIN4 dstdomain https://*.windowsupdate.microsoft.com http_access allow WIN1 http_access allow WIN2 http_access allow WIN3 http_access allow WIN4 http_access allow ncsa_users --/snip-- Stille the same :( > >>> That's the wrong options if you are doing the authentication locally. >>> always_direct is for bypassing parent proxies. >>> I think what you want to do is to use "http_access allow WIN1" (and so >>> on) as seperate ACLs to your main one that allows your clients to >>> access. Of course, as always, I could be way off. > >> That did'n work. It still prompts for user and password :( > > The order of http_access rules is important. If you have your > authentication http_access rule before the 'allow WIN1', the > authentication popup will show. > > Joost > > Atenção: Esta mensagem foi enviada para uso exclusivo do(s) destinatários(s) acima identificado(s), podendo conter informações e/ou documentos confidencias/privilegiados e seu sigilo é protegido por lei. Caso você tenha recebido por engano, por favor, informe o remetente e apague-a de seu sistema. Notificamos que é proibido por lei a sua retenção, disseminação, distribuição, cópia ou uso sem expressa autorização do remetente. Opiniões pessoais do remetente não refletem, necessariamente, o ponto de vista da CETIP, o qual é divulgado somente por pessoas autorizadas. Attention: This message was sent for exclusive use of the addressees above identified, being able to contain information and or privileged/confidential documents and law protects its secrecies. In case that you it has received for deceit, please, it informs the shipper and erases it of your system. We notify that law forbids its retention, dissemination, distribution, copy or use without express authorization. Personal opinions of the shipper do not reflect, necessarily, the point of view of the CETIP, which is only divulged by authorized people.