>This is the rule I use on our servers: > >"iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT >--to-port 3128" > >The only difference I can see is in the order... I don't know if that >matters. Order is a little more important than on most posixy apps. You can't, for example, specify --dport without giving -p tcp beforehand. Jan Engelhardt -- | Alphagate Systems, http://alphagate.hopto.org/