I'm having a strange problem with a test squid3 setup. Here's the stack: Debian Etch squid3-stable8 Apache2 PHP 5.2.6 Pressflow 6.19.96 Here are some relevant (I think) configuration lines from my squid.conf: http_port 3128 accel defaultsite=hbc.carousel30.com cache_peer 127.0.0.1 parent 80 0 no-query originserver acl cookie_logged_in_set rep_header Set-Cookie LOGGED_IN=Y cache deny cookie_logged_in_set acl cookie_logged_in_out rep_header Cookie LOGGED_IN=Y cache deny cookie_logged_in_out acl cookie_logged_in req_header Cookie LOGGED_IN=Y cache deny cookie_logged_in acl forbidden http_status 403 cache deny forbidden cache allow all Now here's the weird thing - check this curl output: * About to connect() to hbc.carousel30.com port 3128 (#0) * Trying 10.1.1.30... connected * Connected to hbc.carousel30.com (10.1.1.30) port 3128 (#0) > GET /public-relations HTTP/1.1 > User-Agent: curl/7.19.7 (universal-apple-darwin10.0) libcurl/7.19.7 OpenSSL/0.9.8l zlib/1.2.3 > Host: hbc.carousel30.com:3128 > Accept: */* > * HTTP 1.0, assume close after body < HTTP/1.0 200 OK < Date: Sat, 04 Dec 2010 02:09:44 GMT < Server: Apache/2.2.9 (Debian) PHP/5.2.6-1+lenny9 with Suhosin-Patch < X-Powered-By: PHP/5.2.6-1+lenny9 < Cache-Control: public, max-age=3600 < Last-Modified: Sat, 04 Dec 2010 02:09:44 +0000 < Expires: Sun, 11 Mar 1984 12:00:00 GMT < Vary: Cookie,Accept-Encoding < ETag: "1291428584" < Content-Type: text/html; charset=utf-8 < Age: 2921 < X-Cache: HIT from hbc.carousel30.com < X-Cache-Lookup: HIT from hbc.carousel30.com:3128 < Via: 1.0 hbc.carousel30.com (squid/3.0.STABLE8) < Connection: close < Looks like it worked, right? But check out these LiveHTTPHeaders from Firefox: http://hbc.carousel30.com:3128/public-relations GET /public-relations HTTP/1.1 Host: hbc.carousel30.com:3128 User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: __utma=161943141.1775494857.1290365571.1291409352.1291426819.6; __utmz=161943141.1290365571.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); s_nr=1290880083545; s_vnum=1293472083545%26vn%3D2; __unam=5789972-12ca2db5ec4-340d5eb4-1; __utmc=161943141; __utmb=161943141.20.10.1291426819 If-None-Match: "1291430283" HTTP/1.0 200 OK Date: Sat, 04 Dec 2010 03:01:15 GMT Server: Apache/2.2.9 (Debian) PHP/5.2.6-1+lenny9 with Suhosin-Patch X-Powered-By: PHP/5.2.6-1+lenny9 Cache-Control: public, max-age=3600 Last-Modified: Sat, 04 Dec 2010 03:01:15 +0000 Expires: Sun, 11 Mar 1984 12:00:00 GMT Vary: Cookie,Accept-Encoding Etag: "1291431675" Content-Encoding: gzip Content-Length: 7694 Content-Type: text/html; charset=utf-8 X-Cache: MISS from hbc.carousel30.com X-Cache-Lookup: MISS from hbc.carousel30.com:3128 Via: 1.0 hbc.carousel30.com (squid/3.0.STABLE8) Connection: keep-alive MISS every time! Safari is definitely HIT because it's coming back lickety-split. Any ideas? Anyone seen this kind of thing before?