Thank you!
After beating my head against a wall on this issue for the past month, your post described exactly what our problem was. Now I can finally put this issue to rest and watch with excitement all of the DENIED entries in our squid logs tomorrow