> I know about external_acl_type but this one assumes the user is logged > in and it won't work since the user is prompted for password before > being passed to may external acl program (post-auth). Squid will only try to authenticate the user if your external_acl_type format specifies %LOGIN. In your case all you need is %SRC to provide the source IP. Alan
