Hi, I want to log proxy request in the case of Access-Reject from proxy server In the conf file (site-enables/default): post-proxy { log_proxy_reply Post-Proxy-Type Fail-Authentication { log_proxy_request log_control } } I've tested it with Fail or Fail-Authentication. The same result, proxy request wasn't printed out. Debug ouput: .... post-proxy { log_proxy_reply Post-Proxy-Type Fail-AuthenticationOpening new proxy socket 'proxy address * port 0' Listening on proxy address * port 43154 (0) Proxying request to home server 127.0.0.1 port 10812 timeout 14.000000 (0) Sent Access-Request Id 129 from 0.0.0.0:43154 to 127.0.0.1:10812 length 182 (0) NAS-Port-Type = Virtual (0) CHAP-Password = 0x0103d8b4385d31b89f746a2838b87fa049 (0) Service-Type = Framed-User (0) Called-Station-Id = 'proxy.corp' (0) Calling-Station-Id = '421905725408' (0) Framed-Protocol = PPP (0) CHAP-Challenge = 0xe3c6f04f3c08c6067deb9c79c060e966 (0) User-Name = '421905725408' (0) Connect-Info = '8640000' (0) NAS-IP-Address = 85.237.227.1 (0) NAS-Port = 385 (0) Qos-Policy-Policing = 'Uniq-Sess-ID385' (0) Event-Timestamp = 'Jun 18 2015 11:48:41 CEST' (0) Message-Authenticator := 0x00 (0) Proxy-State = 0x313131 Waking up in 0.3 seconds. (0) Clearing existing &reply: attributes (0) Received Access-Reject Id 129 from 127.0.0.1:10812 to 127.0.0.1:43154 length 25 (0) Proxy-State = 0x313131 (0) # Executing section post-proxy from file ./sites-enabled/default (0) post-proxy { (0) log_proxy_reply: EXPAND /app_log/radius/auth/radius.log (0) log_proxy_reply: --> /app_log/radius/auth/radius.log (0) log_proxy_reply: EXPAND %t : Info PROXY-REPLY(%{User-Name}): %{pairs:proxy-reply:} (0) log_proxy_reply: --> Thu Jun 18 11:48:41 2015 : Info PROXY-REPLY(421905725408@proxy.corp): Proxy-State = 0x313131 (0) [log_proxy_reply] = ok (0) } # post-proxy = ok (0) Login incorrect (Home Server says so): [421905725408@proxy.corp/<via Auth-Type = CHAP>] (from client localhost port 385 cli 421905725408) (0) Using Post-Auth-Type Reject (0) Post-Auth-Type sub-section not found. Ignoring. (0) # Executing group from file ./sites-enabled/default (0) Sent Access-Reject Id 111 from 127.0.0.1:1812 to 127.0.0.1:33136 length 0 (0) Finished request What i am doing wrong ? Thx.