Man, thanks! spot on! when i applied your suggestion the problem was solved immediatly, i feel very emberrased, i got that http_access structure suggested in a forum, and worked fine, but one day a important site that needed to be accessed through 9021 port was being denied, so i changed the "deny CONNECT !SSL_PORTS" to "allow CONNECT", so the problem was that i was managing a tool that i dont understand entirily, i will practice more and read deep into it, and experiment on how to correctly change to kerberos thanks Amos! for real! -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users