On Thu, 2008-03-20 at 14:15 +0000, paul cooper wrote: > ive got it configured like this > > logformat squid %tl %ru %Ss %ru %un %ul %ue %ea > external_acl_type ip_user_helper %SRC %LOGIN > /usr/libexec/squid/ip_user_check -f /etc/squid/ip_user.conf Are you sure that helper should use %LOGIN? %LOGIN expands to the authenticated user and requires proxy authentication. I thought this helper is meant to provide the registered username based on the source IP.. in such case only %SRC should be used. Regards Henrik