So configure squid to actually act transparent.
That's what I did, doesn't work though.
Or better, reject the traffic and make everyone actively use the proxy. It does not have as many caching caveats as transparent.
You mean by configuring the users' browsers to use localhost:3128 and deny any other destination? That is a quite good idea but it doesn't really solve the problem. Regards, Sascha