> This may seem stupid, How can we configure squid to allow employees to > modify their own hosts file in windows to work? Currently if someone has a > host file entry that points to a non-existent domain, they can ping it > from their workstations fine, but when they browse they get the squid > error page. Is there a way to tell squid to allow this kind of request or > will I need to build up a hosts file on the transparent proxy itself. You will need to set DNS correctly. The transparent proxy prevents cache corruption attacks by ignoring the clients destination IP and using its own trusted information sources. Amos