On 5/06/2015 1:26 a.m., Jonathan Filogna wrote: > And if i want to make exceptions to memberships on AD, how can i do it? > That's what i need. You can do it two ways. A) place the "!administrador" test on the end of each of the skype deny lines. B) place an "allow administrador" line above the skype rules In both cases remove the two custom administrador related lines you have now, and move the skype rules down below your "deny !ntlm" line and above the "allow ntlm" line. Like so: http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow manager webserver http_access deny manager acl ntlm proxy_auth REQUIRED http_access deny !ntlm # (for the A way) http_access deny numeric_IPS !administrador http_access deny Skype_UA !administrador http_access deny !validUserAgent !administrador # (for the B way) http_access allow administrador http_access deny numeric_IPS http_access deny Skype_UA http_access deny !validUserAgent http_access allow ntlm http_access deny all Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users