9. Since using DansGuardian my squid ACLs no longer work.
That is correct. The source ip of the request to squid is localhost as it is DansGuardian making the request which is running locally on the server. There are two solutions. One is to put squid in front of DansGuardian and have DansGuardian use an uprstream proxy such as the ISPs. The other is to install the patch available to make squid use the X-Forwarded-For entry from DansGuardian which would make the ACLs work again.