I am setting up squid for authentication using ncsa_auth. I am using iptables to grab all traffic to port 80 and redirecting to port 8080 where squid is listening. All works well and users are prompted for passwords before they can browse. However, I just noticed one XP Pro browser that had the proxy set as 127.0.0.1 port 5400 and it's connecting without any authentication! How do I block this? The Win 2K computers do not have this problem. I expect only 192.168.0.9 to accept the proxy connection. JGN