squid 做代理的问题（squid.conf在内）

whn3375

squid 做代理，在经由sophos 111.111.111.111 virus-scan到Internet。
user -> squid -> sophos -> Internet
定义了111.111.111.111 的8080口，可是却发现download文件时，从squid不断的向111.111.111.111 的80接口发请求。
应该是上位proxy定义时的问题，请问下面的squid.conf里面少了什么吗？
------------------------------------------------------------------------
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80                # http
acl Safe_ports port 21                # ftp
acl Safe_ports port 443                # https
acl Safe_ports port 70                # gopher
acl Safe_ports port 210                # wais
acl Safe_ports port 1025-65535        # unregistered ports
acl Safe_ports port 280                # http-mgmt
acl Safe_ports port 488                # gss-http
acl Safe_ports port 591                # filemaker
acl Safe_ports port 777                # multiling http
acl CONNECT method CONNECT
acl lan src 10.111.0.0/255.255.0.0
acl sig-proxy dst 111.111.111.111
acl awan dstdomain .aaa.com
acl awan dstdomain .bbb.com
acl awan dstdomain .ccc.com
acl localip dst 10.0.0.0/8
acl localip dst 172.16.0.0/12
acl localip dst 192.168.0.0/16
always_direct allow awan
always_direct deny sig-proxy
always_direct allow localip
never_direct allow all
http_access allow manager localhost
http_access allow lan
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny all
icp_access allow all
http_port 8080
cache_peer 111.111.111.111 parent 8080 7 no-query
hierarchy_stoplist cgi-bin ?
access_log /var/log/squid/access.log squid
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
refresh_pattern ^ftp:                1440        20%        10080
refresh_pattern ^gopher:        1440        0%        1440
refresh_pattern .                0        20%        4320
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
header_access X-Forwarded-For deny all
header_access Via deny all
header_access Cache-Control deny all
visible_hostname host1.sub2.sub.com
icp_port 8082
forwarded_for off
coredump_dir /var/spool/squid

luqi0520

sophos  是什么东西？