ok, makes sense now :) thank you for explanation :) On Tue, Mar 20, 2012 at 11:27 PM, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote: > On 21.03.2012 15:04, alexus wrote: >> >> I dont understand maybe someone else can help me understand that... >> how is that I allowed this domain in my log I get deny and next line >> is miss?! >> >> 1332295011.844 0 186.176.225.154 TCP_DENIED/407 4183 GET >> http://f.femowe.com/cgi/r? - NONE/- text/html >> 1332295013.395 166 186.176.225.154 TCP_MISS/302 1552 GET >> http://f.femowe.com/cgi/r? gmbproxy DIRECT/70.42.23.12 text/html >> > > That is Authentication happening. > > The client and Squid requests credentials "DENIED/407". > Then the client repeats with credentials and gets admitted. > > http://wiki.squid-cache.org/SquidFaq/SquidLogs#Squid_result_codes > http://wiki.squid-cache.org/SquidFaq/SquidLogs#HTTP_status_codes > > >> >> and this is what I have in my squid.conf >> >> acl bk dstdomain f.femowe.com >> http_access deny !bk > > > This config snippet is irrelevant by itself ... it denies on URL which are > *not* involving the domain which your log snippet is about. > > > Amos -- http://alexus.org/