Hi All, Many thanks Mr.Antony, Alexix and the rest who helped me with the rule, the DNAT rule works great!! Was just going thru a website http://www.antiproxy.com wow...they have loads of ports thru which proxies can be bypassed?So does that mean I have to write rules for each of the relavent ports?at the moment I have just done for port 3128, and blocked the site antiproxy.com thru squid. Suggestions are welcome... Regards Harry "In all this world, there is only you When all else ceases, there is only you" -- to my MASTER! Harish harish@xxxxxxxxxxxx harish.sabnani@xxxxxxxxxxxxxxxx ----- Original Message ----- From: "Antony Stone" <Antony@xxxxxxxxxxxxxxxxxxxx> To: "Netfilter" <netfilter@xxxxxxxxxxxxxxxxxxx> Sent: Tuesday, April 20, 2004 7:37 AM Subject: Re: Rules for Blocking Proxies... > On Tuesday 20 April 2004 3:27 pm, Alexis wrote: > > > beside this. > > You could remove privileges from the clients, even with an active directory > > implementation (ajjjj) or i think i saw cybercafe software that block any > > settings change on the client box. > > That is making some very big assumptions about what Operating System/s are > running on the clients.... > > Regards, > > Antony. > > -- > The truth is rarely pure, and never simple. > > - Oscar Wilde > > Please reply to the list; > please don't CC me. > >