When we work with proxy we can receive TCP_DENIED/403 – but why? We can enable debug in squid.conf for checking which acl block our tcp sesion:

debug_options ALL,1 33,2

and watch your cache.log to see which acl blocks you.