> My Proxy box (slackware10.1 / 2.6.11.6) has 2 ip : > * Iso Lan : 192.168.2.1 (eth1) > * Lan : 192.168.0.80 (eth0) > > acl our_networks src 192.168.2.0/24 > http_access allow our_networks > ***** > > and I have setup 1 rule for iptable : > iptables -t nat -A PREROUTING -i eth1 -p TCP --dport > 80 -j REDIRECT --to-port 3128 Your problem is your are allowing web-access of Iso lan with squid.conf file. But missing to redirect all 80 traffic to eth0 interface in iptables. Use as, iptables -t nat -A PREROUTING -i eth0 -p TCP --dport 80 -j REDIRECT --to-port 3128 HTH. Best Regards, Squid Runner Team SquidRunner - An Automatic Squid Builder Web: http://freshmeat.net/projects/squidrunner/ Mail: squidrunner_dev at yahoo dot com __________________________________ Yahoo! Messenger Show us what our next emoticon should look like. Join the fun. http://www.advision.webevents.yahoo.com/emoticontest