Damn! Did it again. Sent the reply direct rather than to the list. Sorry. Indunil, Thanks very much for your assistance. On Jan 8, 2008 4:57 AM, Indunil Jayasooriya wrote: > > What about iptables' INPUT chain. try to add below. > > #For squid traffic to Accept > iptables -A INPUT -i eth1 -d 192.168.60.254 -p tcp -s 192.168.60.0/24 > --dport 3128 -j ACCEPT I get this error message. --dport not found. I'm thinking of recompiling my kernel, I can't think it will help, but it's worth a try... > I assume eth1 is the interface connected to LAN. Yes, eth1 is on the LAN.