> The problem is you have used one ACL name (NoAccess) with two > different ACL types (dstdomain and proxy_auth). Give the two > ACLs different names, and make either a combined http_access > rule using those ACLs or sequential http_access rules to > server your goal. > > For example... > > acl NoAccess dstdomain .aim.com > acl authentication proxy_auth REQUIRED > acl myNet src 192.168.0.0/24 > > http_access deny !authentication > http_access deny NoAccess > http_access allow myNet > http_access deny all Thank you, I get it now & that works. --- Chris Covington IT Plus One Health Management 75 Maiden Lane Suite 801 NY, NY 10038 646-312-6269 http://www.plusoneactive.com