Hi Amos, Some additional info. I tried: acl testdomain dstdomain .google.be acl freesites dstdomain .flamboree.local acl freesites dstdomain .flamboree.be acl noAuth src all acl AuthUsers proxy_auth REQUIRED http_access deny testdomain deny_info http://login.flamboree.local/?url=%s testdomain http_access allow freesites http_access allow AuthUsers deny_info http://login.flamboree.local/?url=%U noAuth http_access deny !AuthUsers noAuth http_access deny all The deny_info with external url for the testdomain works fine. Unfortunately unauthenticated users get a user/pass popup and with a cancel, the default (or custom) error page. Kind regards, Philippe