In my cache.log I am getting 2007/11/05 09:23:42| The request GET http://cp.slalom.com/ is DENIED, because it matched 'password' 2007/11/05 09:23:42| The reply for GET http://cp.slalom.com/ is ALLOWED, because it matched 'password' 2007/11/05 09:23:42| The request GET http://cp.slalom.com/ is DENIED, because it matched 'password' 2007/11/05 09:23:42| The reply for GET http://cp.slalom.com/ is ALLOWED, because it matched 'password' 2007/11/05 09:23:42| The request GET http://cp.slalom.com/ is ALLOWED, because it matched 'ProxyUsers' 2007/11/05 09:23:42| The reply for GET http://cp.slalom.com/ is ALLOWED, because it matched 'all' 2007/11/05 09:23:42| The request CONNECT cp.slalom.com:443 is DENIED, because it matched 'password' 2007/11/05 09:23:42| The reply for CONNECT cp.slalom.com:443 is ALLOWED, because it matched 'password' 2007/11/05 09:23:42| The request CONNECT cp.slalom.com:443 is DENIED, because it matched 'password' 2007/11/05 09:23:42| The reply for CONNECT cp.slalom.com:443 is ALLOWED, because it matched 'password' 2007/11/05 09:23:42| The request CONNECT cp.slalom.com:443 is ALLOWED, because it matched 'ProxyUsers' 2007/11/05 09:23:42| The request CONNECT cp.slalom.com:443 is DENIED, because it matched 'password' 2007/11/05 09:23:42| The reply for CONNECT cp.slalom.com:443 is ALLOWED, because it matched 'password' 2007/11/05 09:23:42| The request CONNECT cp.slalom.com:443 is DENIED, because it matched 'password' 2007/11/05 09:23:42| The reply for CONNECT cp.slalom.com:443 is ALLOWED, because it matched 'password' 2007/11/05 09:23:42| The request CONNECT cp.slalom.com:443 is DENIED, because it matched 'password' 2007/11/05 09:23:42| The reply for CONNECT cp.slalom.com:443 is ALLOWED, because it matched 'password' 2007/11/05 09:23:42| The request CONNECT cp.slalom.com:443 is ALLOWED, because it matched 'ProxyUsers' 2007/11/05 09:23:42| The request CONNECT cp.slalom.com:443 is DENIED, because it matched 'password' 2007/11/05 09:23:42| The reply for CONNECT cp.slalom.com:443 is ALLOWED, because it matched 'password' 2007/11/05 09:23:42| The request CONNECT cp.slalom.com:443 is ALLOWED, because it matched 'ProxyUsers' In my conf I only see two lines that have password in them # Use domain authentication (-G for domain global group) external_acl_type win_domain_group ttl=120 %LOGIN e:/squid/libexec/mswin_check_lm_group.exe -G # Users must be in the ProxyUsers group in AD (individual users no groups) acl ProxyUsers external win_domain_group ProxyAccess acl NoProxyUsers external win_domain_group NoProxyAccess # Require password for user account acl password proxy_auth REQUIRED http_access allow password ProxyUsers Do I have conflicting lines in my conf that would cause this behavior or are these normal entries for cache.log? Eric Young Senior Network Engineer Tully's Coffee Corporation 206.695.6504