> >> acl localnet proxy_auth REQUIRED > >> acl de_urls dstdomain .fedex.com .ups.com > >> acl de_InetAllow external win_domain_group Web_access_dataentry > >> http_access allow de_InetAllow de_urls > >> acl Full_InetAllow external win_domain_group Web_access_full > >> http_access allow Full_InetAllow > > > The above rules only gives access, it does not restrict access. Only deny > lines restricts access.. But what I'm saying is, with the configuration above, de_InetAllow cannot go anywhere (has no access). The group "Full_InetAllow" can though. There's something about this which squid doesn't like. Please help. -d
