> Any other http_access lines denying access BEFORE these ones? > Nope, no denies before. Here's the config again: acl localnet proxy_auth REQUIRED acl de_urls dstdomain .fedex.com .ups.com acl de_InetAllow external win_domain_group Web_access_dataentry http_access allow de_InetAllow de_urls acl Full_InetAllow external win_domain_group Web_access_full http_access allow Full_InetAllow http_access deny all Members of "Full_InetAllow" have full internet access, and it is working. Members of "de_InetAllow" do not have access to anything, not even to the sites I listed in "de_urls". Any ideas? Thanks, -d
