Forgot to 'reply to all'. My bad Resend... Dear Henrik, my first acl: acl users proxy_auth REQUIRED so theres that defaults - acl our_networks, manager, localhost etc acl tecnology proxy_auth [users in this group] acl directors proxy_auth [users in this group] . . . . . until: acl forbidden_sites url_regex -i "/path/forbidden_sites.txt" acl forbidden_webmail blablabla and then: http_access deny our_networks users forbidden_sites !directors (keep denying webmail etc) http_access allow our_networks users http_access deny all Henrik Nordstrom escreveu: > On fre, 2008-10-31 at 08:43 -0200, Luciano Cassemiro wrote: > >> Everything is OK but what bothers me is: the login window shows up when an user >> tries to connect to a forbidden site then he fill with his credentials BUT after >> OK button the login window appears again and again until the user click cancel. > > This happens is the last acl on the http_access deny line denying access > is realted to authentication. > > Now I am a little confused as the http_access rules you posted did not > have this.. is there other http_access deny lines in your squid.conf? > > > Regards > Henrik