Thanks for the reference, Amos. However, how do you set specific ACLs for each interface? That is, don't see a method for saying that we want 1.1.1.100 to be LDAP auth, but not 1.1.1.101. Thanks, again. >>> Amos Jeffries <squid3@xxxxxxxxxxxxx> 11/24/2009 5:42 PM >>> On Tue, 24 Nov 2009 12:36:28 -0500, "Gary Bennett" <benngl@xxxxxxxxxxxxxx> wrote: > We have two virtual interfaces on our squid server: > > acl authproxy myip 1.1.1.100 > acl ipproxy myip 1.1.1.101 > > We would like to make all users coming in via the authproxy network > connection authenticate via our LDAP. We would like all users coming in via > ipproxy to have no auth, but be restricted to a certain network range. > > How can we place different ACLs on different interfaces? TIA for any > assistance http://wiki.squid-cache.org/Features/Authentication#How_do_I_use_authentication_in_access_controls.3F Tote the example of time-based authentication. You want something very similar but using those "myip" ACLs instead of the "time" type. Amos