Transparent squid + local IP addresses

[jonathan.lees]

I want to use Squid transparent so staff and students can bring in their own laptops to school and browse the Internet without changing proxy settings. I've done this but if I try to browse to a local IP address, e.g. my webserver, the request goes out to the Internet and of course fails. Does anyone know if it's possible to set an exception in Squid to not do this or is this something that could be done using iptables?

 

thanks

[Geoff]

you need to setup an ACL for the sites that are internal, then use the 'always_direct' configuration option to tell squid not to use parent proxies to access the sites covered by the ACL.