A Squid question for the squid experts...

[neuro4848]

Greetings all!

I have a particular issue with my SQUID version 2.5 STABLE 6...

Well, not more of an issue than a "could it be done" type of thing.

I currently have my SQUID server proxying (sp?) our LAN users via an AUTO PAC file just fine, but I was wondering if the following is possible: can I add an exclusion to the PAC file where I would say the following:

Allow a user to bypass the proxy by connecting to http://www.test.com DIRECTLY and have the SQUID proxy server resolve the address on behalf of the client?

Mind you, the end user does NOT have DNS configured on their desktop for security reasons...

Any ideas? I'd love to hear 'em...

[ph34r]

How many "special" users? Would it be easier to just add an entry to the hosts file on their computer?

[neuro4848]

By "special users", I mean ALL the LAN users. About 100+ that are on 2 different sites, 500 miles away. It would be fine for a few users using the HOSTS file, but I need this to be global.

Am I crazy? Can it be done?

I've tried looking online, but to no avail. Maybe I'm not using the correct word syntax....

[neuro4848]

No replies?

Am I asking in the wrong forum, perhaps?

[neuro4848]

I guess not a lot of people here use Squid, but in any event, I think I've found the answer....

In case anyone wants to know, there's a no_cache directive in the squid.conf that you configure.

By setting up an ACL entry to a particular URL, you can then set the no_cache directive to DENY the ACL entry you just set.

I think this will resolve the URL on behalf of the client, but not cache the content, which is perfect.

I'm gonna try this hopefully by this week and post my results...