On October 2, 2004 05:03 am, it clown wrote: > Hi All, > > i am having some trouble in getting irc working through > iptables and squid.When i put a forwarder in my iptables > rule i can connect to irc but when i want to go through the > proxy i have no luck.I have loaded the ip_nat_irc and > tried: > > -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT > --to-ports 3128. > > I have made the changes in squid to allown port 6667. > Port 6667 is allowed OUT. Squid itself will not proxy IRC that I'm aware of. When you say 'Forwarder' -- I take it you allow the connection out directly to the IRC server with a rule in the FORWARD chain. What (client) are you using to connect to IRC through the proxy? And --- for what it's worth why do you believe that Squid will proxy the IRC connection? There are web based clients that can run through proxies, however they are completely java based, and the connection is from the webserver end to the IRC server. There is a java applet that someone cooked up that has the initial connection from the webserver, but requires that the client can see the internet without filtering as subsequent traffic is from the client to the IRC server, across not well known ports, and this also has some other issues that make it unwise to use. Alistair Tonner RSO Technical Services, HPUX Support