Hi all, Thanks to Henrik I now have my NTLM problems sorted out. However, I don't think squid (Version 3.0.PRE5) is returning objects from its cache. Having temporarily disabled the cache in two browsers (IE7, Firefox 2) to test requests to a popular url: http://www.dilbert.com/comics/dilbert/archive/images/dilbert2007229140823.gif My access.log file shows the following: ------ 1187949259.376 2 10.0.9.0 TCP_DENIED/407 3072 GET http://www.dilbert.com/comics/dilbert/archive/images/dilbert2007229140823.gif - NONE/- text/html 1187949259.388 4 10.0.9.0 TCP_DENIED/407 3429 GET http://www.dilbert.com/comics/dilbert/archive/images/dilbert2007229140823.gif - NONE/- text/html 1187949259.666 270 10.0.9.0 TCP_CLIENT_REFRESH_MISS/304 271 GET http://www.dilbert.com/comics/dilbert/archive/images/dilbert2007229140823.gif dhope DIRECT/204.78.53.196 - 1187949261.116 143 10.0.9.0 TCP_CLIENT_REFRESH_MISS/304 271 GET http://www.dilbert.com/comics/dilbert/archive/images/dilbert2007229140823.gif dhope NONE/- - 1187949262.579 131 10.0.9.0 TCP_CLIENT_REFRESH_MISS/304 271 GET http://www.dilbert.com/comics/dilbert/archive/images/dilbert2007229140823.gif dhope NONE/- - ------ So, initial two TCP_DENIED because of the NTLM stuff which is fine but i was expecting to see TCP_HIT ? - Which as I understand it means the object is retrieved from the cache. If I look in my store.log I see: cat store.log | grep "http://www.dilbert.com/comics/dilbert/archive/images/dilbert2007229140823.gif" ------ 1187949259.666 RELEASE -1 FFFFFFFF 529DED9854414F8B487FF49DAAD9B765 304 1187949069 -1 -1 unknown -1/0 GET http://www.dilbert.com/comics/dilbert/archive/images/dilbert2007229140823.gif 1187949261.116 RELEASE -1 FFFFFFFF 9949E670BAEE2B140DF73C41ABFD94BC 304 1187949070 -1 -1 unknown -1/0 GET http://www.dilbert.com/comics/dilbert/archive/images/dilbert2007229140823.gif 1187949262.579 RELEASE -1 FFFFFFFF 7D212453D9D7D6B2D91D5966B1F2F563 304 1187949072 -1 -1 unknown -1/0 GET http://www.dilbert.com/comics/dilbert/archive/images/dilbert2007229140823.gif 1187949281.476 RELEASE -1 FFFFFFFF 37ADBAEC49F1EE18E9D6C9E6B6E8D6D2 304 1187949091 -1 -1 unknown -1/0 GET http://www.dilbert.com/comics/dilbert/archive/images/dilbert2007229140823.gif ------ and a load more of the same... Am I just being silly? or is there a genuine weirdness going on here? I've uploaded my squid.conf should anyone feel up to looking through it: http://files.davehope.co.uk/squid.conf Any insight would be greatly appreciated. Thanks, Dave