[squid-users] How to limit web browsing for some ipadresses.

Hi ,

I am now running squid with ncsa_auth.

I have bound ip addresses to usernames. So users now can access
Internet from their ips.

Now I want a few users to prevent from accessing all the sites. But
Instead, I want them to allow to access a few sites scuh as
google.com,cnn.com ,bbc.com. I want to limit in that way.

I have wriiten below rules. But those users still can access all the sites.

external_acl_type ip_user %SRC %LOGIN %DST
/usr/lib/squid/ip_user_check -f /etc/squid/ip.conf

acl ncsa_users proxy_auth REQUIRED
acl ip_users external ip_user %SRC %LOGIN %DST

http_access deny !ncsa_users
http_access deny !ip_users
http_access allow ip_users
http_access allow ncsa_users

my ip.conf file is like this.
[root@worldnet squid]# cat /etc/squid/ip.conf
192.168.101.25 indunil .google.com .bbc.com .cnn.com
192.168.101.90 www90

Accoring to the above file, User indunil with ip address
192.168.101.25 has access to google.com,bbc.com and cnn.com.
But the user indunil of ip address 192.168.101.25 still has access to
all the sites.

I want ip address 192.168.101.25 to allow above urls.

How can I solve this?

-- 
Thank you
Indunil Jayasooriya