General Linux Notes‎ > ‎Squid Proxy‎ > ‎

Windows Updates

Add the following fairly high in the /etc/squid/squid.conf

acl windowsupdate dstdomain windowsupdate.microsoft.com
acl windowsupdate dstdomain .update.microsoft.com
acl windowsupdate dstdomain download.windowsupdate.com
acl windowsupdate dstdomain redir.metaservices.microsoft.com
acl windowsupdate dstdomain images.metaservices.microsoft.com
acl windowsupdate dstdomain c.microsoft.com
acl windowsupdate dstdomain www.download.windowsupdate.com
acl windowsupdate dstdomain wustat.windows.com
acl windowsupdate dstdomain crl.microsoft.com

acl CONNECT method CONNECT
acl wuCONNECT dstdomain www.update.microsoft.com

http_access allow CONNECT wuCONNECT localnet
http_access allow windowsupdate localnet

#proxying windows updates.

range_offset_limit -1
quick_abort_min -1


Windows 2003/Windows XP

On windows machines (windows 2003 and windows xp) run
proxycfg -p server:port "list of items to bypass" e.g. 192.168.1.*;*.lan;<local>

This is because windows update does not use the regular proxy set up for internet explorer.

Windows 7

Use the Netsh command-line tool, first switch to the Netsh Winhttp context. Then, use the show proxy command to view settings or the set proxy command to define your proxy server configuration settings. For example, you can run the following command to view current proxy server settings.

Netsh winhttp show proxy

The following commands demonstrate how to configure proxy server settings.

Netsh winhttp set proxy myproxy

Netsh winhttp set proxy myproxy:80 ";bar"

Netsh winhttp set proxy proxy-server="http=myproxy;https=sproxy:88" bypass-list="*.contoso.com"


Alternatively, if you have configured Internet Explorer proxy server settings correctly, you can import settings from Internet Explorer into WinHTTP by using the following command.


Netsh winhttp import proxy source=ie


To reset your proxy server settings, run the following command.


Netsh winhttp reset proxy
Comments