> Um, the failures are on CONNECT requests? That could be the bug we only just > fixed a few days ago. Where Squid re-wraps the CONNECT headers around it > before passing to any peer (even SSL ones). Yes, they are. I built this version of Squid 2.7 from the latest Ubuntu sources 3 days ago, so I take it that the fix hasn't hit their packages yet? What about Squid 3? -- steph