Sorry,I corrected the question to a concise content. According to RFC 3507 , --------------------------------------------------------------------- Despite the above restrictions on encapsulation, the hop-by-hop Proxy-Authenticate and Proxy-Authorization headers MUST be forwarded to the ICAP server in the ICAP header section (not the encapsulated message). --------------------------------------------------------------------- Is "not the encapsulated message" a part recorded as follows in the ICAP packet of squid? --------------------------------------------------------------------- REQMOD icap://xxx.xxx.xxx.xxx:1344/ ICAP/1.0 Host: xxx.xxx.xxx.xxx:1344 Date: Thu, 16 Apr 2009 01:40:26 GMT Proxy-Authorization: Basic YWFhYWE6YmJiYmI= Encapsulated: req-hdr=0, null-body=809 Allow: 204 --------------------------------------------------------------------- Is "the encapsulated message" a part recorded as follows in the ICAP packet of squid? --------------------------------------------------------------------- GET http://yyy.yyy.com/ HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, \ application/x-shockwave-flash, application/vnd.ms-excel, \ application/vnd.ms-powerpoint, application/msword, application/xaml+xml, \ application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, \ */* Accept-Language: ja UA-CPU: x86 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB5; .NET CLR \ 1.1.4322; .NET CLR 2.0.50727; InfoPath.1; .NET CLR 3.0.04506.30) Host: yyy.yyy.com Proxy-Connection: Keep-Alive Cookie: PREF=ID=723b4cbbf7ba804a:TB=4:TM=1239790695:LM=1239790695:S=6AZwgsV; \ NID=21=VKAhwqrfNBEmPHnPv6gcVUnj3S9u51nIZhe2 --------------------------------------------------------------------- Thanks, -------------------------------------- Power up the Internet with Yahoo! Toolbar. http://pr.mail.yahoo.co.jp/toolbar/