I nees separate logging. Squid 3.3.8 access_log daemon:/var/log/squid3/access_fullaccess.log squid fullaccess_users access_log daemon:/var/log/squid3/access_fullaccess.log squid fullaccess access_log daemon:/var/log/squid3/access.log squid !fullaccess_users access_log daemon:/var/log/squid3/access.log squid !fullaccess After request web page. access.log 1381117717.164 142 10.207.77.4 TCP_MISS/304 397 GET http://www.ipchicken.com/images/ipc.gif kam FIRSTUP_PARENT/10.0.1.184 - access_fullaccess.log 1381117717.163 142 10.207.77.4 TCP_MISS/304 397 GET http://www.ipchicken.com/images/ipc.gif kam FIRSTUP_PARENT/10.0.1.184 - kam is member full access_user group. I was waiting entry only in access_fullaccess.log file. Where is mistake? Best regards, Kirill