Hi, I am trying to understand the headers being received by a squid server response. The output of a netcat connect to 10.0.0.2:1234 is below. I assume proxy.office is 10.0.0.2, but where does the "deny" come from, and where does proxy2.external fit in? Any help would be appreciated. quintin@quintin-VAIO:/tmp$ nc -v 10.0.0.2 1234 Connection to 10.0.0.2 1234 port [tcp/*] succeeded! GET http://www.google.com/ HTTP/1.1 Host: www.google.com HTTP/1.0 403 Forbidden Server: squid/2.7.STABLE9 Date: Fri, 07 Oct 2011 12:47:59 GMT Content-Type: text/html Content-Length: 1058 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from proxy.office X-Cache-Lookup: NONE from proxy.office:1234 Via: '1.1 proxy2.external:3128 (squid/2.7.STABLE4), 1.0 proxy2.external:3128 (squid/2.7.STABLE4)' Connection: close <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The requested URL could not be retrieved</TITLE> <STYLE type="text/css"><!--BODY{background-color:#ffffff;font-family:verdana,sans-serif}PRE{font-family:sans-serif}--></STYLE> </HEAD><BODY> <H1>ERROR</H1> <H2>The requested URL could not be retrieved</H2> <HR noshade size="1px"> <P> While trying to retrieve the URL: <A HREF="http://www.google.com/">http://www.google.com/</A> <P> The following error was encountered: <UL> <LI> <STRONG> Access Denied. </STRONG> <P> Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect. </UL> <P>Your cache administrator is <A HREF="mailto:webmaster">webmaster</A>. <BR clear="all"> <HR noshade size="1px"> <ADDRESS> Generated Fri, 07 Oct 2011 12:47:59 GMT by proxy.office (squid/2.7.STABLE9) </ADDRESS> </BODY></HTML>