Allow port 443 connections from those proxies on mirrorlists. Add hosts entries for proxy10 and proxy01 that should allow ssl to work right. Will test this on one proxy/mirrorlist and move on to the others.