Ngo, Toan wrote: > Hi, > > I'm using Squid 2.5 stable 11. I noticed log entries with TCP_DENIED > when I go visit a website. The connection gets through but there are > several TCP_DENIED entries before the login is accepted. I am on a > domain so NTLM authentication is transparent but is there anyway to get > the browser or squid to authenticate the first try? It always seems to > authenticate on the third attempt. So for every http request that is > logged, there are 2 TCP_DENIED entries prior to it. That's NTLM handshaking, it's normal behaviour. Blame MS for creating a crappy implementation of the authentication mechanism. Joost