Interesting. I wonder if your Squid is resolving "localhost" domain name as ::1 and rejecting it because IPv6 is disabled, therefore not permitted. Or if its the domain name not matching the proxy name. Try adding "-j isn-phc-cache" which sets the Host: header to match what the cache thinks its public domain name is. Amos