hmm sound like you are running your proxy "squid" in non interception mode, so why not give a kick to Interception "transparent" which mean you don't have to configure each client to use your proxy i-e it will be transparent to them. http://www.tldp.org/HOWTO/TransparentProxy.html regards Askar On 5/17/05, Wennie V. Lagmay <wlagmay@xxxxxxxxxxxxx> wrote: > Our ISP's Proxy server is proxy.ISP.net , our company's own proxy server is > proxy.ourcompany.net. Our own proxy server has delay_pool but our ISP proxy > server dont have. I want to control our client to use only our company proxy > server. how can I block the proxy.ISP.net using IP tables so that every body > can be force to use our compnay proxy server. (note that our company proxy > server is connected to our ISP proxy server as cache_peer parent) > > thanks, > > wennie > > -- I love deadlines. I like the whooshing sound they make as they fly by. Douglas Adams