On Saturday 19 April 2003 12:21, NetSnake wrote: > I use iptables to nat to internet, but I found some user use a proxy > on intranet, like, 192.168.0.5 can access to internet, 192.168.0.10 can > not access to internet, now 10 access a proxy on 192.168.0.5, then he > can access now, I thought in package from 192.168.0.5 must contant some > information about proxy, like source mac address, this can help me to > identified users, can iptables do this? the source address for machine 192.168.0.10 is masqueraded!! This because in effect it's 192.168.0.5 to access internet. I guess there is no solution. bye