мои настройки:
firewall.conf :
---------------------------------------------------
#!/bin/sh
# Manual script for ipfw
echo -n "Starting firewall..."

ipfw='/sbin/ipfw -q'
int_if='vr0'
ext_if='rl0'

${ipfw} add divert natd all from any to any via $ext_if

${ipfw} add fwd 127.0.0.1,3128 tcp from any to any 80,8080 in via $int_if

${ipfw} add allow all from any to any via $ext_if
${ipfw} add allow all from any to any via $int_if

${ipfw} add deny all from any to any
echo "DONE"
----------------------------------------------------
squid.conf:
----------------------------------------------------
http_port 3128

dns_nameservers 127.0.0.1
redirect_children 20
redirect_rewrites_host_header on
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 64 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 4096 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 8 KB
ipcache_size 1024
ipcache_low 90
ipcache_high 95
fqdncache_size 1024
cache_replacement_policy heap GDSF
memory_replacement_policy heap GDSF
cache_dir ufs /usr/local/squid/cache 100 16 256
cache_access_log /usr/local/squid/logs/access.log
cache_log /usr/local/squid/logs/cache.log
cache_store_log /usr/local/squid/logs/store.log
emulate_httpd_log off
mime_table /usr/local/etc/squid/mime.conf
log_fqdn off
ftp_user anonymous@tolya.ua
ftp_list_width 32
ftp_passive on
request_header_max_size 20 KB
request_body_max_size 0 KB
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320
quick_abort_min 16 KB
quick_abort_max 16 KB
quick_abort_pct 95
negative_ttl 5 minutes
positive_dns_ttl 6 hours
negative_dns_ttl 1 minute
range_offset_limit 0 KB
forward_timeout 4 minutes
connect_timeout 1 minute
peer_connect_timeout 30 seconds
read_timeout 15 minutes
request_timeout 5 minutes
persistent_request_timeout 1 minute
client_lifetime 1 day
half_closed_clients on
pconn_timeout 120 seconds
ident_timeout 10 seconds
shutdown_lifetime 30 seconds

acl our_networks src 192.168.0.0/24
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443 563     # https, snews
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
http_access allow our_networks
http_access deny all

http_reply_access allow all
icp_access allow all
miss_access allow all

reply_header_max_size 20 KB
reply_body_max_size 0 allow all

mail_program mail
cache_mgr help_desk85@list.ru
cache_effective_user squid
cache_effective_group squid
announce_host squid
announce_port 3128

httpd_accel_port 80
httpd_accel_host virtual
httpd_accel_single_host on
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
httpd_accel_no_pmtu_disc off

logfile_rotate 10
tcp_recv_bufsize 0 bytes
memory_pools on
memory_pools_limit 5 MB

delay_pools 1
delay_class 1 2
delay_parameters 1 -1/-1 20000/20000
delay_access 1 allow our_networks
delay_access 1 deny all

forwarded_for on
client_db on
netdb_low 900
netdb_high 1000
netdb_ping_period 5 minutes
icon_directory /usr/local/etc/squid/icons
global_internal_static on
error_directory /usr/local/etc/squid/errors/Russian-1251
maximum_single_addr_tries 1
incoming_icp_average 6
incoming_http_average 4
incoming_dns_average 4
min_icp_poll_cnt 8
min_dns_poll_cnt 8
min_http_poll_cnt 8
max_open_disk_fds 0
offline_mode off
uri_whitespace strip
coredump_dir /usr/local/squid/cache
redirector_bypass off
ignore_unknown_nameservers on
request_entities off
high_response_time_warning 0
high_page_fault_warning 0
high_memory_warning 0
vary_ignore_expire off
sleep_after_fork 0
relaxed_header_parser on
-----------------------------------------------------------
access.log:
-----------------------------------------------------------
1161957896.276     23 192.168.0.217 TCP_MISS/503 1417 GET http://www.opennet.me/opennews/art.shtml? - NONE/- text/html
1161957898.785    508 192.168.0.217 TCP_MISS/503 1417 GET http://www.opennet.me/opennews/art.shtml? - NONE/- text/html
1161957899.476    246 192.168.0.217 TCP_MISS/503 1417 GET http://www.opennet.me/opennews/art.shtml? - NONE/- text/html
1161957899.842     38 192.168.0.217 TCP_MISS/503 1417 GET http://www.opennet.me/opennews/art.shtml? - NONE/- text/html
1161957900.009    167 192.168.0.217 TCP_MISS/503 1417 GET http://www.opennet.me/opennews/art.shtml? - NONE/- text/html
1161957900.171    161 192.168.0.217 TCP_MISS/503 1417 GET http://www.opennet.me/opennews/art.shtml? - NONE/- text/html
1161957900.352    180 192.168.0.217 TCP_MISS/503 1417 GET http://www.opennet.me/opennews/art.shtml? - NONE/- text/html
1161957900.515     39 192.168.0.217 TCP_MISS/503 1417 GET http://www.opennet.me/opennews/art.shtml? - NONE/- text/html
1161957900.707    191 192.168.0.217 TCP_MISS/503 1417 GET http://www.opennet.me/opennews/art.shtml? - NONE/- text/html
1161957900.860    152 192.168.0.217 TCP_MISS/503 1417 GET http://www.opennet.me/opennews/art.shtml? - NONE/- text/html
1161957901.034    174 192.168.0.217 TCP_MISS/503 1417 GET http://www.opennet.me/opennews/art.shtml? - NONE/- text/html
1161957901.198    163 192.168.0.217 TCP_MISS/503 1417 GET http://www.opennet.me/opennews/art.shtml? - NONE/- text/html
-----------------------------------------------------------------
Сквида собиралась со следующими параметрами:
-----------------------------------------------------------------

│ ┌────────────────────────────────────────────────────────────────┐ │
│ │[ ] SQUID_LDAP_AUTH       Install LDAP authentication helpers   │ │
│ │[X] SQUID_DELAY_POOLS     Enable delay pools                    │ │
│ │[ ] SQUID_SNMP            Enable SNMP support                   │ │
│ │[ ] SQUID_CARP            Enable CARP support                   │ │
│ │[ ] SQUID_SSL             Enable SSL support for reverse proxies│ │
│ │[ ] SQUID_PINGER          Install the icmp helper               │ │
│ │[ ] SQUID_DNS_HELPER      Use the old 'dnsserver' helper        │ │
│ │[ ] SQUID_HTCP            Enable HTCP support                   │ │
│ │[X] SQUID_VIA_DB          Enable forward/via database           │ │
│ │[ ] SQUID_CACHE_DIGESTS   Enable cache digests                  │ │
│ │[X] SQUID_WCCP            Enable Web Cache Coordination Protocol│ │
│ │[X] SQUID_UNDERSCORES     Allow underscores in hostnames        │ │
│ │[X] SQUID_CHECK_HOSTNAME  Do hostname checking                  │ │
│ │[ ] SQUID_STRICT_HTTP     Be strictly HTTP compliant            │ │
│ │[X] SQUID_IDENT           Enable ident (RFC 931) lookups        │ │
│ │[ ] SQUID_USERAGENT_LOG   Enable User-Agent-header logging      │ │
│ │[ ] SQUID_CUSTOM_LOG      Enable custom log format              │ │
│ │[ ] SQUID_ARP_ACL         Enable ACLs based on ethernet address │ │
│ │[X] SQUID_PF              Enable transparent proxying with PF   │ │
│ │[X] SQUID_IPFILTER        Enable transp. proxying with IPFilter │ │
│ │[X] SQUID_FOLLOW_XFF      Follow X-Forwarded-For headers        │ │
│ │[X] SQUID_ICAP            Enable ICAP client functionality      │ │
│ │[ ] SQUID_AUFS            Enable the aufs storage scheme        │ │
│ │[ ] SQUID_COSS            Enable the COSS storage scheme        │ │
│ │[ ] SQUID_LARGEFILE       Support log and cache files >2GB      │ │
│ │[ ] SQUID_STACKTRACES     Create backtraces on fatal errors     │ │
│ │[X] SQUID_RCNG            Install an rcNG startup script        │ │
--------------------------------------------------------------------------
если у клиентов прописать в браузерах прокси,то он работает хорошо,если же как транспарент,то в логах пишет ошибки

Помогите пожалуйста разобраться!

Спасибо!
Мой ICQ: 321-101-694