I am using squid @home behind a linux firewall and I dont think it is a matter of squid to dislike your windows updates. In our company we have a lot of windows(es) behind a linux firewall(s). I think it might be that you have been too restrictive with your rules, couse for windows is one port not enough ;-) could you post some samples or you can try accepting the traffic that is requested from your internal network with ESTABLISHED and RELATED Patrick Ahler wrote: > I know this is a bit off topic, but at first I thought it was a netfilter > problem, now I'm convinced it's squid. I redirect my internal traffic > through a squid proxy... the problem I'm running into is that I can't seem > to get any windows updates to work for my machines using the proxy. When it > begins to detect upgrades needed, it will just sit on 0%. Anyone else had > this problem? If so, how'd you fix it? > > -=PaTriCK