I have a transparent squid proxy that I am using to filter out ads from web traffic which works well enough, however I would like to have the option of bypassing the proxy as well at times when I do want ads (because sometimes the blacklist is over-zealous).
Ideally this would be done by having squid listen on two different ports, and allowing clients to manually connect to the second port if they want unfiltered traffic. Is it possible to do this without requiring authentication on either port?
currently I have a firewall setup that only allows outbound traffic from the squid proxy - I could set up a second squid server and allow traffic from both, but I would prefer to configure my existing setup instead if possible.
edit: this is running on top of PFsense as a network-wide filter, just squid, no squidgaurd