I need some clarification regard my code, If the user bypass SplashRules.html and enter in the url SplashAccepted.html it will allow internet for him ? and will create session for him ? or he have to go thru SplashRules.html ? I want to restrict the user to SplashRules.html then click on agree button to browse the net My question here what if he bypass SplashRules.html and enter in url address of SplashAccepted.html is going to allow him for accessing the net ? 1. external_acl_type session concurrency=100 ttl=3 %SRC /usr/lib/squid3/ext_session_acl -a -T 10800 -b /etc/squid3/session/ 2. 3. acl session_login external session LOGIN 4. 5. external_acl_type session_active_def concurrency=100 ttl=3 %SRC /usr/lib/squid3/ext_session_acl -a -T 10800 -b /etc/squid3/session/ 6. 7. acl session_is_active external session_active_def 8. acl clicked_login_url urlpath_regex -i SplashAccepted.html 9. 10. acl Bypass_Cache_Peer dstdomain .guestwifi.local 11. acl splash dstdomain .guestwifi.local 12. 13. deny_info http://service.guestwifi.local/SplashRules.html session_is_active 14. 15. http_access allow clicked_login_url session_login 16. http_access allow splash 17. http_access deny !session_is_active