I am most of the way through setting up a squid proxy server on pfSense and I am having issues with NTLM authentication. The first time I open a web page I receive a "page cannot be displayed error" but if I refresh the page loads fine. Wireshark captures on the 2 streams look like this(Page not loading on left, page loading on right)
It seems IE does not want to authenticate until the second time.
Does anybody know how to fix this?
Edit: Picture is a little hard to read so
Failed request:
CONNECT www.google.com.au:443 HTTP/1.0
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)
Host: www.google.com.au
Content-Length: 0
DNT: 1
Proxy-Connection: Keep-Alive
Pragma: no-cache
HTTP/1.0 407 Proxy Authentication Required
Server: squid
Mime-Version: 1.0
Date: Wed, 24 Jul 2013 05:08:17 GMT
Content-Type: text/html
Content-Length: 3365
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
Proxy-Authenticate: NTLM
X-Cache: MISS from squid.company.local
X-Cache-Lookup: NONE from squid.company.local:3128
Via: 1.0 squid.company.local (squid)
Connection: close
Successful request
CONNECT www.google.com.au:443 HTTP/1.0
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)
Host: www.google.com.au
DNT: 1
Proxy-Connection: Keep-Alive
Pragma: no-cache
Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==
Content-Length: 0
HTTP/1.0 407 Proxy Authentication Required
Server: squid
Mime-Version: 1.0
Date: Wed, 24 Jul 2013 05:08:20 GMT
Content-Type: text/html
Content-Length: 3463
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
Proxy-Authenticate: NTLM TlRMTVNTUAACAAAADAAMADgAAAAFgomiURdWtMYNXhYAAAAAAAAAAH4AfgBEAAAABgEAAAAAAA9GAEkATgBGAEkAVAACAAwARgBJAE4ARgBJAFQAAQAKAFAAUgBPAFgAWQAEACQAZgBmAGEAcABhAHkAcwBtAGEAcgB0AC4AYwBvAG0ALgBhAHUAAwAwAHAAcgBvAHgAeQAuAGYAZgBhAHAAYQB5AHMAbQBhAHIAdAAuAGMAbwBtAC4AYQB1AAAAAAA=
X-Cache: MISS from squid.company.local
X-Cache-Lookup: NONE from squid.company.local:3128
Via: 1.0 squid.company.local (squid)
Connection: keep-alive