Hi all: I have a Squid running on 192.168.1.1 listening on 3128 TCP port. Users from 192.168.1.0/24 can browse the Internet without problems thanks to a REDIRECT rule in my shorewall config. But users from differents networks (192.168.2.0/24, 192.168.3.0/24, etc.) can't browse the Internet. Those networks are connected to 192.168.1.0/24 via a VPN connection. My redirect rule in iptables syntax is like this: iptables -t nat -A PREROUTING -s 0.0.0.0/24 -i eth2 -p tcp --dport 80 -j REDIRECT --to-ports Is there a restriction to work transparent proxy for other networks different from 192.168.1.0/24? Do I have to configure squid to listen on each range o network addresses? Thanks