acl lan src 192.168.1.0/24
acl vip-urls url_regex "/etc/squid/allowed.vip"
acl vip-user src 192.168.1.100/32

http_access allow vip-user

http_access allow lan !vip-urls
http_access deny all