Chris Robertson wrote: > Here's another possibility... Change your iptables rule to > > iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to > 127.0.0.1:3128 > > and have squid only listen on the loopback interface ("http_port > 127.0.0.1:3128" in squid.conf). Would that work? I haven't done much > with nat in quite a while, so I'm not sure if you can NAT to lo. > > Chris That looks wild! I've got this machine running fine just now, with Netfilter routing between eth0 and eth1 and Squid running without problems. And I'm too big a coward to try your idea... Thanks though! //Niels