In a bid to get ICP to work I've noticed I didn't have htcp_access defined. From the FAQ: http://www.squid-cache.org/Versions/v2/2.6/cfgman/htcp_access.html It tells us to use it just like http_access and shows the example: htcp_access allow all But when I add this line to my squid.conf and restart, it tells me 2007/10/19 15:46:33| parseConfigFile: line 55 unrecognized: 'htcp_access allow all' The only thing I can think of is if this binary of Squid for RHEL4 wasn't compiled with support for that. Is this a switch that needs to be added, or should it just be there anyway? Details of my build: bash-3.00# /usr/sbin/squid -v Squid Cache: Version 2.6.STABLE13 configure options: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--target=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--sharedstatedir=/usr/com' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--exec_prefix=/usr' '--bindir=/usr/sbin' '--libexecdir=/usr/lib64/squid' '--localstatedir=/var' '--datadir=/usr/share' '--sysconfdir=/etc/squid' '--enable-epoll' '--enable-snmp' '--enable-removal-policies=heap,lru' '--enable-storeio=aufs,coss,diskd,null,ufs' '--enable-ssl' '--with-openssl=/usr/kerberos' '--enable-delay-pools' '--enable-linux-netfilter' '--with-pthreads' '--enable-ntlm-auth-helpers=SMB,fakeauth' '--enable-external-acl-helpers=ip_user,ldap_group,unix_group,wbinfo_grou p' '--enable-auth=basic,digest,ntlm' '--enable-digest-auth-helpers=password' '--with-winbind-auth-challenge' '--enable-useragent-log' '--enable-referer-log' '--disable-dependency-tracking' '--enable-cachemgr-hostname=localhost' '--enable-underscores' '--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-do main-NTLM,SASL' '--enable-cache-digests' '--enable-ident-lookups' '--enable-follow-x-forwarded-for' '--enable-wccpv2' '--enable-fd-config' '--with-maxfd=16384' 'CFLAGS=-fPIE -Os -g -pipe -fsigned-char' 'LDFLAGS=-pie' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'target_alias=x86_64-redhat-linux-gnu' Still unsure of if this will make our squids talk to each other, instead, if they don't have the page they don't check with eachother, just just go to the origin server with the FIRST_PARENT_UP message. Relevant lines: cache_peer nsdgecmweb-18.appl.devjones.com parent 80 0 no-query no-netdb-exchange no-digest originserver login=PASS cache_peer nldg-28.appl.devjones.com sibling 3128 3130 proxy-only login=PASS no-query default acl fromneighbor src 192.168.120.226 #cache_peer_access nldg-28.appl.devjones.com deny fromneighbor cache_peer_access nldg-28.appl.devjones.com allow fromneighbor icp_access allow all log_icp_queries on Thanks all. P -- PS - my company adds the following disclaimer after I send the email, so I can't turn it off. Sorry. If you are not the intended recipient of this message (including attachments), or if you have received this message in error, immediately notify us and delete it and any attachments. If you no longer wish to receive e-mail from Edward Jones, please send this request to messages@xxxxxxxxxxxxxxxx You must include the e-mail address that you wish not to receive e-mail communications. For important additional information related to this e-mail, visit www.edwardjones.com/US_email_disclosure