-----Original Message----- From: Ronald Warner [mailto:warnerr@xxxxxxxxx] Sent: Friday, 27 May 2005 12:55 To: squid-users@xxxxxxxxxxxxxxx Subject: [squid-users] TCP_DENIED/407 Good day. We have recently started using squid2.5stable9 with NTML authentication. Authentication works fine. However, there are times with access to Internet websites seem slow. I reviewed the access.log and found the entries below: 1117161853.042 3 10.2.141.234 TCP_DENIED/407 1741 GET http://gmail.google.com/gmail? NONE/- text/html 1117161853.081 12 10.2.141.234 TCP_DENIED/407 1768 GET http://gmail.google.com/gmail? NONE/- text/html For example, I logged into my gmail account and there are times when gmail would display loading when i open new messages but nothing happens. this is when i'll see the above entries in the access.log. Does squid try to reauthenticate again? Is there anyway of preventing this? Thanks much. -----End Original Message----- The TCP_DENIED/407 entries in your access log are normal. This is just how NTLM authentication works. We find that TCP_DENIED/407 entries take up approximately 25% of the total number of entries in our access log. Regards, Ken.