Ok, I got squid working great behind my firewall even set it up so IE would autodetect it. What I would rather do though is have netfilter/the firewall server(192.168.1.a) forward any http packets from my network 192.168.1.0 to the proxy server on 192.168.1.b and then out to the internet through the firewall(192.168.1.a). That way the proxy would be transparent to the users' browsers and no autodetection would be required. Not sure how to setup these rules, or if this is even the most efficient way of accomplishing the task. Also, I don't know if it makes a difference... but the firewall runs NAT tables. So, in other words, this is what I'd like to do... (user)192.168.1.c --->(firewall)192.168.1.a--->(squid/proxy)192.168.1.b--->( firewall)192.168.1.a Thanks in advance, -Patrick