Not that I am aware of. I think it coming from one of the games my sons play. It could be picking up the proxy setting from IE or firefox I suppose. The big test will be to disable the socks proxy. Trying a different approach, some one suggested enabling user authentication, I have done that in the socks proxy for one user, me.
Gert, I have the proxy in standard mode and packets above 1030 allowed out. I have a number of other protocols allowed out through the http proxy, mainly stuff my kids use for games. There are specific PF rules to destinations to bypass the proxy for things like adobe etc.
