Hi all, I'm trying to set up a situation as follows: I have a web server at [server]:80 . I've got squid installed on [server]:3000 . The requirement is to ensure that any request to web server protected content (/FP/*) is redirected to a splash page (terms and conditions), accepted, then allowed. I've got most of the way, but the last bit doesn't work. This is on a private network. Squid config: http_port 3000 accel defaultsite=192.168.56.101 cache_peer 127.0.0.1 parent 80 0 no-query originserver external_acl_type session ttl=3 concurrency=100 %SRC /usr/lib/squid/ext_session_acl -a -T 60 acl session_login external session LOGIN external_acl_type session_active_def ttl=3 concurrency=100 %SRC /usr/lib/squid/ext_session_acl -a -T 60 acl session_is_active external session_active_def acl accepted_url url_regex -i accepted.html.* acl splash_url url_regex -i ^http://192.168.56.101:3000/splash.html$ acl protected url_regex FP.* http_access allow splash_url http_access allow accepted_url session_login http_access deny protected !session_is_active deny_info http://192.168.56.101:3000/splash.html session_is_active quid.conf is also at http://pastebin.com/PNqcVV1L Basically, if I access protected content, I get redirected correctly to splash_url (/splash.html) . I then click to go to "accepted.html", which then redirects, theoretically, to /FP/. The problem is, accepted.html is never creating the session (No LOGIN) so /FP just redirects back to the splash page. So I'm not getting sessions, in short. With debugging on, I get a match when I access accepted.html (http://pastebin.com/PuCGL6m0) but still, no session login Any ideas? Thanks all! -Cemil