On Thu, Sep 01, 2005 at 11:14:16AM -0400, Covington, Chris wrote: > I'd like to deny some domains after people have authenticated. I tried > this: > > acl NoAccess dstdomain .aim.com > acl NoAccess proxy_auth REQUIRED > acl AuthorizedUsers proxy_auth REQUIRED > http_access deny NoAccess > http_access allow AuthorizedUsers Untested proposal (yeah, I'm lazy): acl authentication proxy_auth REQUIRED acl forbidden_domains dstdomain .aim.com http_access deny !proxy_auth http_access deny forbidden_domains http_access allow all Or even shorter: [...] http_access deny !proxy_auth http_access allow !forbidden_domains Regards Christoph -- ~ ~ ~ ".signature" [Modified] 3 lines --100%-- 3,41 All