Hi, I want to know if it's possible to have an ACL to grant a user to access a domain. My users are authenticated with LDAP. To grant access a user : > acl prj1 proxy_auth toto > http_access allow prj1 > http_reply_access allow prj1 To grant access for a domain : > acl prj2 dstdom_regex youtube > http_access allow prj2 > http_reply_access allow prj2 But : - user 'toto' have access all web - OR all my users have acess at youtube An idea ? Thanks a lotz