Hot answers tagged squid
I added the following lines and it worked great: acl windowsupdate dstdomain windowsupdate.microsoft.com; acl windowsupdate dstdomain .update.microsoft.com; acl windowsupdate dstdomain download.windowsupdate.com; acl windowsupdate dstdomain redir.metaservices.microsoft.com; acl windowsupdate dstdomain images.metaservices.microsoft.com; acl windowsupdate ...
You're probably using squid 2.2 or greater, and you need to prefix the domain with a dot, so instead of site1.pl, you would use .site1.pl. As stated here on the ACL page: Squid-2.2 and later needs to have domains prefixed by a dot
Actually, this rule is not blocking http traffic from Wan, but redirects this traffic to your Proxy. In other words, your actual rule redirects both incoming and outgoing http traffic to your gateway on port 3128. I would suggest to specify source/destination interfaces : # Traffic from LAN to Internet is redirected to your Proxy $IPT -t nat -A PREROUTING ...
Only top voted, non community-wiki answers of a minimum length are eligible