>Yes, that is what I want: send all requests to the radius of dfn.de, >except for "tu-dortmund.de". whats wrong? > Nothing then. Modules listed in authorize are executed and request is proxied. Ivan Kalik Kalik Informatika ISP