/ ip firewall nat
add chain=dstnat src-address= IPLINUX dst-address=IPLINUX protocol=tcp src-port=80 action=accept comment="CACHE" \
disabled=no
add chain=dstnat src-address=IPCLINTES protocol=tcp dst-port=80 action=dst-nat to-addresses=IPLINUX to-ports=PORTA PROXY \
comment="" disabled=no
add chain=srcnat out-interface=SAIDA NET action=masquerade comment="NAT" disabled=no
aqui nao precisei criar acl nenhuma pra rede deu certo de boa...
Se vc quiser pode procurar no
Forum Proxy Masters • Index page tem meu squid.conf ....