Bypass proxy for a specific URL - dst_noproxy_url.acl

[hjkl (H&M)]

Hi,
I am trying to bypass an domain (like *.ipfire.org) from proxy.
I have tried to use the Excluded URL s (one per line) under GUI section Web Proxy Auto-Discovery Protocol (WPAD) / Proxy Auto-Config (PAC) but that failed: the wpad.dat does not contain any reference to the *.ipfire.com I have put in that GUI section.
I have noticed that above GUI section writes inside /var/ipfire/proxy/advanced/acls/dst_noproxy_ip.acl but there is no refference toward this file in squid.conf. Should I add it by myself inside /var/ipfire/proxy/advanced/acls/include.acl, and if answer is yes, what is the syntax?

Thank you!

Late edit - are this config lines OK?

acl DST_NOPROXY_IP src "/var/ipfire/proxy/advanced/acls/dst_noproxy_ip.acl"
acl DST_NOPROXY_URL src "/var/ipfire/proxy/advanced/acls/dst_noproxy_url.acl"
always_direct allow DST_NOPROXY_IP DST_NOPROXY_URL

[hvacguy (Shaun HVAC)]

This maybe a good read.

Need help with network issue - Maybe squid related?

I subscribe to a streaming service that is experiencing an issue. I disabled the URL filter, the Intrusion Prevention System, the QoS while trying to figure this out. This has been happening since March 2022. I’ve been going back and forth with the vendor and they are pointing the “blame” finger back to me (actually my network). I’ve dug through the various logs and I don’t see anything noteworthy. But I did see LOTS of these errors in the squid access log starting on Mar 12: 1647144914.34…

Not sure I know what your trying to do.

[hjkl (H&M)]

Thank you,
I know and used the firewall.local for many years (CUSTOMPREROUTIG CHAIN).
But today I want to use domain for bypass because the vendor of the service constantly adds new IP ranges.

Up to now I ended to the conclusion that BOTH IP and Domain ACL that are listed as “Noproxy” (bypass lists for IP and domain ranges) are not respect by Squid.

I will continue to search for syntax how to enable them.

Thank you!