While building my first firewall with OpenBSD 3.5 and pf, I added Squid 2.5.STABLE5 to proxy http. I had it running okay with the help of Daniel's instructions from benzedrine.cx, but then I decided to "play" with the settings and things went bad. Incorrect resolves to pages I knew existed, but I could no longer reach. I started getting sites offering web hosting.
Long story short (headaches, frustration, pkg_delete, recompile, and endless changes, one-at-a-time, to squid.conf), I discovered that the addition of:
header_access All deny all
was what screwed it all up. Someone smarter than I may know why, but I don't. As soon as I commented that out, things worked correctly.
Maybe that bit of information will save someone else some time.
Rob
