Amos, what could be causing this? When I desable NTLM authentication or when I use Kerberos all access go just fine, but when only NTLM is able I can't get access to https pages and I get in the logs TCP_DENIED/407. How can I debug it? regards 2012/4/20 Amos Jeffries <squid3@xxxxxxxxxxxxx>: > On 21/04/2012 1:15 a.m., Harry Mills wrote: >> >> Hi Wladner, >> >> I don't think this is causing your problems, but I think you need to >> change the following: >> >> Instead of: >> >> http_access deny CONNECT !Safe_ports >> >> try: >> >> http_access deny !Safe_ports >> http_access deny CONNECT !SSL_ports >> >> Also, on the last two lines of your included config you have: >> >> acl AUTENTICADO proxy_auth REQUIRED >> http_access allow AUTENTICADO > > > This is one of several correct proxy-auth configurations. > > >> >> I simply have: >> >> http_access allow proxy_auth >> >> I have no idea if this will help, but worth giving it a try perhaps? > > > ?? for that to work you require this somewhere above your http_access rule > ... > > acl proxy_auth proxy_auth REQUIRED > > or some other definition for an ACL *label* "proxy_auth". > > Amos