We require our users to use a farm of centralized Squid Proxies to access the internet. Recently, I added Dansguardian with the AV patch to the bunch and things seem to run well. Except for streams, which I found out not to work even when ONLY using squid. Example: ======== With Dansguardian: 1119597563.719 596 160.45.172.180 TCP_MISS/600 364 HEAD http://64.236.34.97/stream/1040 - DEFAULT_PARENT/127.0.0.1 - 1119597564.118 160 160.45.172.180 TCP_MISS/503 1645 GET http://127.0.0.1:6700/ - DEFAULT_PARENT/127.0.0.1 text/html Doesn't work Without DG, only using Squid: 1119597704.625 903 160.45.172.180 TCP_MISS/600 364 HEAD http://64.236.34.97/stream/1040 - DIRECT/64.236.34.97 - 1119597704.713 0 160.45.172.180 TCP_NEGATIVE_HIT/503 1653 GET http://127.0.0.1:6700/ - NONE/- text/html Doesn't work either. When using a direct connection / no proxy (I'm the admin, I may do that), I get: $ wget --save-headers --proxy=off -nd http://64.236.34.97/stream/1040 --09:28:34-- http://64.236.34.97/stream/1040 => 1040 Connecting to 64.236.34.97:80... connected. HTTP request sent, awaiting response... 200 No headers, assuming HTTP/0.9 and in the output file I see: ICY 200 OK icy-notice1: <BR>This stream requires <a href="http://www.winamp.com/">Winamp</a><BR> icy-notice2: SHOUTcast Distributed Network Audio Server/SolarisSparc v1.9.5<BR> icy-name: CLUB 977 The 80s Channel icy-genre: 80s Pop Rock icy-url: http://www.club977.com icy-pub: 1 icy-metaint: 0 icy-br: 128 icy-irc: #shoutcast icy-icq: 0 icy-aim: N/A