Hi guys, On the access.log the Squid show TCP_DENIED entry to some part of website I´m authenticating my users using NTLM and all entry on access.log that DENIED part of site do not show the standard domain\username on log. only "- -"... For example: 192.168.15.13 - contac\xtz0001 [07/Jul/2008:17:42:07 -0300] "GET http://c.extra.com.br/content/consul.swf HTTP/1.1" 503 1924 TCP_MISS:DIRECT 192.168.15.13 - - [07/Jul/2008:17:42:07 -0300] "GET http://c.extra.com.br/content/brastemp.swf HTTP/1.1" 407 2183 TCP_DENIED:NONE 192.168.15.13 - - [07/Jul/2008:17:42:07 -0300] "GET http://c.extra.com.br/content/brastemp.swf HTTP/1.1" 407 2257 TCP_DENIED:NONE 192.168.15.13 - contac\xtz0001 [07/Jul/2008:17:42:07 -0300] "GET http://c.extra.com.br/content/brastemp.swf HTTP/1.1" 503 1928 TCP_MISS:DIRECT 192.168.15.13 - - [07/Jul/2008:17:42:07 -0300] "GET http://c.extra.com.br/content/lg.swf HTTP/1.1" 407 2165 TCP_DENIED:NONE 192.168.15.13 - - [07/Jul/2008:17:42:07 -0300] "GET http://c.extra.com.br/content/lg.swf HTTP/1.1" 407 2239 TCP_DENIED:NONE Looking for HTTP manuals I got that "407" is a Proxy Authentication Required response. Is possiblie that I have problems authenticating all requests ? Also I´m using SquidGuard feature, but I have tried disable it on squid.conf without success. Why squid deny some part of site and allow other one ? thanks in Advance Alexandre Novos endereços, o Yahoo! que você conhece. Crie um email novo com a sua cara @ymail.com ou @rocketmail.com. http://br.new.mail.yahoo.com/addresses