Squid Proxy activated, but users can access internet without it !

[hamko]

Hello,
I set up squid proxy on default port 3128
Descativated LAN firewall Rules except antilockout rule (80)
Users must apply proxy adress in internet option on their webrowsers
But,
they still can access to internet without the proxy !
i don't know if miss some option, but i reinstalled PFsense 3 times, just activated the squid proxy and desactivated the LAN firewall rules !

Mycurrent version : 2.3.4-RELEASE-p1 (i386).

[Harvy66]

Show us the rules, on the LAN interface, instead of saying what you think they're doing. Do you use a Layer 3 switch?