Windows Updates

Add the following fairly high in the /etc/squid/squid.conf

acl windowsupdate dstdomain windowsupdate.microsoft.com

acl windowsupdate dstdomain .update.microsoft.com

acl windowsupdate dstdomain download.windowsupdate.com

acl windowsupdate dstdomain redir.metaservices.microsoft.com

acl windowsupdate dstdomain images.metaservices.microsoft.com

acl windowsupdate dstdomain c.microsoft.com

acl windowsupdate dstdomain www.download.windowsupdate.com

acl windowsupdate dstdomain wustat.windows.com

acl windowsupdate dstdomain crl.microsoft.com

acl CONNECT method CONNECT

acl wuCONNECT dstdomain www.update.microsoft.com

http_access allow CONNECT wuCONNECT localnet

http_access allow windowsupdate localnet

#proxying windows updates.

range_offset_limit -1

quick_abort_min -1

Windows 2003/Windows XP

On windows machines (windows 2003 and windows xp) run

proxycfg -p server:port "list of items to bypass" e.g. 192.168.1.*;*.lan;<local>

This is because windows update does not use the regular proxy set up for internet explorer.

Windows 7

Use the Netsh command-line tool, first switch to the Netsh Winhttp context. Then, use the show proxy command to view settings or the set proxy command to define your proxy server configuration settings. For example, you can run the following command to view current proxy server settings.

Netsh winhttp show proxy

The following commands demonstrate how to configure proxy server settings.

Netsh winhttp set proxy myproxy

Netsh winhttp set proxy myproxy:80 ";bar"

Netsh winhttp set proxy proxy-server="http=myproxy;https=sproxy:88" bypass-list="*.contoso.com"

Alternatively, if you have configured Internet Explorer proxy server settings correctly, you can import settings from Internet Explorer into WinHTTP by using the following command.

Netsh winhttp import proxy source=ie

To reset your proxy server settings, run the following command.

Netsh winhttp reset proxy