Bypass transparent squid proxy smoothwall

vi /etc/rc.d/rc.firewall.up

find #squid
before #squid, use the following (all one line, ie RETURN is after -j on the same line):

/sbin/iptables -t nat -A PREROUTING -i $GREEN_DEV -p tcp --dport 80 -d yourBypassProxyDomainHere.com -j RETURN

save and exit

Run this to restart iptables

/etc/rc.d/rc.netaddress.down; /etc/rc.d/rc.netaddress.up

done.

OK, *I* wasn't done, because I'm using Full Firewall Control addon, which basically negates anything done in rc.firewall.up (the source code for FFC itself says flush iptables before parsing FFC list.)
So, to bypass proxy for specific addresses in smoothwall via Full Firewall Control, ping the [domain to bypass dansguardian] to get the ip, and set it up as GREEN from anywhere, port 80, to RED (ip address of bypass domain) method TCP Allow. Funny, that seems easier than I'd have thought.

PuTTY, SSH, Web Browser tunnel

This bypasses your proxy server, tunnels through your own SSH server, and provides web access.

1. Have a running ssh server, accessible from the Internet. http://www.dyndns.com can help give you a name to your IP address, if you have a dynamic one. Making the dyndns connection is beyond the scope of this tutorial.
2. Create a PuTTY session to your ssh server. Chances are, if you know what step 1 is about, you've already created a PuTTY session to it.
3. Inside PuTTY's session, go to Connection, SSH, Tunnels
4. Type a number (8080?) into Source Port. Click Dynamic, Auto, and then [Add]
5. Save the PuTTY sesssion
6. Connect to your PuTTY session
7. Configure your browser's proxy settings: Manual, SOCKS v5, 127.0.0.1, port (whatever number you used as your Source Port in 4.)
   
8. If you go to http://www.gwy.org/yourip.php, you should now see that your IP address is your ssh server.
   

There are interesting side effects that happen when you do this, especially since you usually can ssh connect any time you have any internet access.