A squid oldalon láttam a megoldást, egyszerű.
acl whitelist dstdomain .whitelist.com .goodsite.com .partnerssite.com
acl http proto http
acl port_80 port 80
acl port_443 port 443
acl CONNECT method CONNECT
acl authenticated_users proxy_auth REQUIRED
# authenticate_program /usr/lib64/squid/basic_ncsa_auth
# rules allowing non-authenticated users
http_access allow http port_80 whitelist
http_access allow CONNECT port_443 whitelist
# rules allowing authenticated users
http_access allow http port_80 authenticated_users
http_access allow CONNECT port_443 authenticated_users
# catch-all rule
http_access deny all
A http/https ugyanazon porton lehet.
Működik. Kösz az infókat!