Gotcha! But how do I make the authenticator "stand down" if my external_acl_type returned OK? Something like: external_acl_type custom_acl %SRC /etc/changemyip/squid/config/acl.py acl CustomAcl external custom_acl acl user_1000 proxy_auth some_username !CustomAcl Would that make sense? On Sun, Aug 18, 2013 at 5:03 PM, Alan <lameventanas@xxxxxxxxx> wrote: >> I know about external_acl_type but this one assumes the user is logged >> in and it won't work since the user is prompted for password before >> being passed to may external acl program (post-auth). > > Squid will only try to authenticate the user if your external_acl_type > format specifies %LOGIN. In your case all you need is %SRC to provide > the source IP. > > Alan
