Hi Now I am hoping that the Squid users out there can help me. I (well my boss !) would like to be able to set up Squid in such a way that Sixthform users can have free access to the Internet but lower school can only have access to sites that we specify. Here are my thoughts. I can dictate the IP address and port number that a user has to connect to Squid. So what I thought was have Squid on either 2 IP addresses or 2 ports (8080 & 8181). Then set ACL lists accordingly. This is where I come unstuck. I can't quite see how to block all outgoing requests on port 8181 except for requests that are contained in a list. I hope someone understands the question for a start let alone has an answer ! I suggested to my boss that he buys another machine, it would be dead easy with 2 ! He didn't like that much . . . TIA Dave Turnbull ICT Technician The Purbeck School www.purbeck.dorset.sch.uk