On Tuesday 24 November 2015 at 14:31:15, Ahmad Alzaeem wrote: > The DNS is not broken , it will resolve some websites to ip address of > squid and other websites will rslve to other ip That sounds pretty broken to me (unless the Squid machine really is the web server for those sites whose hostname resolves to this IP address). DNS might be deliberately broken, but it sure isn't working correctly or normally. > Assume ips are static ips on clients You have no alternative but to configure the proxy on the clients, then. As Yuri says, Squid is an HTTP/S proxy - if you tell the clients to use it as a proxy (and provided you point Squid itself at a working DNS server), then it will work. If you do not tell the clients to use Squid (ie: you are trying to use it in intercept mode) then the clients have to correctly resolve the destination IP, and they need to route via the Squid box so that it can intercept the packets. If neither of those is an available option for you, then Squid can't help deal with your very unusual setup. Regards, Antony -- Tinned food was developed for the British Navy in 1813. The tin opener was not invented until 1858. Please reply to the list; please *don't* CC me. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users