> >Oct 14 09:06:47 proxy-cvk-1 squid[12081]: internalStart: unknown request:#012GET /squid-internal-static/icons/silk/arrow_up.png HTTP/1.1#015#012Host: c-69-250-37-253.hsd1.dc.comcast.net#015#012User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0#015#012Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8#015#012Accept-Language: en-US,en;q=0.5#015#012Accept-Encoding: gzip, deflate#015#012Connection: keep-alive#015#012#015#012 After disabling the relaxed header paring I'm seeing for THESE requests: 2013/10/15 10:49:59| internalStart: unknown request: GET /squid-internal-static/icons/silk/arrow_up.png HTTP/1.1 Host: 83.172.86.66 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive 2013/10/15 10:50:05| internalStart: unknown request: GET /squid-internal-static/icons/silk/arrow_up.png HTTP/1.1 Host: 83.172.86.66 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive The question being: Why can 83.172.86.66 query the Proxy at all? -- Ralf Hildebrandt Charite Universitätsmedizin Berlin ralf.hildebrandt@xxxxxxxxxx Campus Benjamin Franklin http://www.charite.de Hindenburgdamm 30, 12203 Berlin Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155