Hello List, i am using LDAP to verify SRC-IP and Destination URL. Weather its allowed or not. Here is my config: external_acl_type ldap_surfer negative_ttl=2 ttl=2 %DST %SRC /etc/scripts/ldap_default_allow.pl acl users external ldap_surfer http_access deny users Howevery, whatever my ldap_default_allow.pl script returns (ERR or OK), the access is always denied ( i guess due: http_access deny users). How does my config have to look like, in order to deny/allow access by using my return values from the helper script? Thanks, Mario