On Monday 12 July 2004 14:38, Antony Stone wrote: > Yes. Just use DNAT, and make sure the Squid box is not on the same subnet > as the clients (so that it has to send the replies back through the > firewall). Ah OK, I was hoping to avoid that since the machine that runs Squid is also an NFS server and various other things... Thanks :) Gavin.