Hi List, I must implement a few firewallrules but I'm a little bit lost. I use a transparent proxy with this following rule: IPTABLES -t nat -A PREROUTING -p tcp -i eth1 -s 192.168.0.0/16 -d ! 192.168.0.0/16 --dport 80 -j REDIRECT --to-port 3128 The -d parameter is because I have a few VPN's and my squid uses a tcp_outgoing_address, so ... Now I must create some exceptions for two IP's more than the 192.168.0.0/16 net but I don't know how ... any ideas ? the Ip's are 129.37.0.113 and 32.97.118.242 thanks, Rhaoni Chiu Pereira