>> For proper transparent operation you need one of these configure >> options.. > > Sorry? > > he said >> I only use ipfw ... > > are you sure? To clarify my answer: For proper opertation of transparent interception proxying your method of interception needs to be supported by Squid and enabled with the proper configure argument. If your method of interception is not supported by Squid then support must first be added before it can work proper. However, in real life transparent interception does not need full support very often as most clients do send Host headers which Squid can use. However, a Squid configured for transparent interception will be somewhat upset if support is not available as Squid knows it won't always work. If a client sends a request without a Host header Squid won't be able to know what to do with the request without proper support enabled as the information about the intended destination is then lost. Regards Henrik