On 27/11/2013 1:00 a.m., Grooz, Marc (regio iT) wrote: > In my first case: > > Squid request: > > -MGET /cgi-bin/upload_status.cgi?uid=060950223627&files=:iso-27001-router-security-audit-checklist.xls&ok=1 HTTP/1.1 > Accept: text/html, application/xhtml+xml, */* > > Webserver answer: > [-MHTTP/1.1 200 OK > Date: Mon, 25 Nov 2013 12:48:57 GMT >> Squid send the first request again and again. > > Direct request without squid: > > Gm/GET /cgi-bin/upload_status.cgi?uid=318568766743&files=:aukirche.JPG&ok=1 HTTP/1.1 > > Webserver answer: > GmHTTP/1.1 200 OK > >> Website gets displayed. > Are those "-M" "Gm/" cgaracters really in front of the GET method name and the HTTP/1.1 response version label? It looks like you may be receiving SOCKS protocol traffic. Amos