On Tuesday 2005-September-06 06:11, Askar wrote: > All teh port 80 traffic redirected to squid 3128 by ... > > $iptables -t nat -A PREROUTING -i eth0 -p tcp -s 0/0 --dport 80 -j > REDIRECT --to-port 3128 > > Now I want to a client -s xx.xx.xx.xx access a site -d xx.xx.xx.xx > then his traffic by pass the squid. actaully if the client xx.xx goes Precede the proxy rule with a -j RETURN rule for your -s client.IP and -d server.IP. See the RETURN target in "man iptables". -- mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header