Hello list, I wonder if it is a proper behavior of the squid to strip authentication headers, then it configured as accelerating proxy? I noticed this after upgrading squid from 2.5STABLE14 to 2.6STABLE1. Here what is send to squid: GET /adm/ HTTP/1.0 User-Agent: Wget/1.8.2 Host: ctsv.engec.ru Accept: */* Connection: Keep-Alive Authorization: Basic YW50b246MTIzMTIz Here waht squid sends to web server: GET /adm/ HTTP/1.0 User-Agent: Wget/1.8.2 Host: ctsv.engec.ru Accept: */* Via: 1.0 himbeer1.engec.ru:80 (squid) X-Forwarded-For: 85.142.33.28 Cache-Control: max-age=259200 Essential configuration from squid.conf: http_port 85.142.33.28:80 vhost defaultsite=himbeer.engec.ru cache_peer 127.0.0.1 parent 80 0 originserver If it a new behavor, it probably need to be documented, since it break many things for a lot of people. Software: squid-2.6.STABLE1-20060711 Compilation options: $ ./configure --bindir=/usr/local/sbin --sysconfdir=/usr/local/etc/squid --datadir=/usr/local/etc/squid --libexecdir=/usr/local/libexec/squid --localstated ir=/usr/local/squid --enable-removal-policies=lru heap --enable-storeio=aufs ufs diskd null --disable-wccp --prefix=/usr/local --with-pthreads --enable-epoll Sincerely, Anton Golubev ENGECON St. Petersburg Russia AAG69-RIPE AAG28-RIPN