hi all i setup my squid proxy follow this url kernel version & iptables all match Minimum Requirements http://wiki.squid-cache.org/Features/Tproxy4#Feature:_TPROXY_version_4.1.2B-_Support some diffenernt ip route add default via isp'gateway dev ppp0 table 100 my squid.conf #Recommended minimum configuration: acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 acl localnet src 10.0.0.0/8 # RFC1918 possible internal network acl localnet src 172.16.0.0/12 # RFC1918 possible internal network acl localnet src 192.168.0.0/16 # RFC1918 possible internal network acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT #url filter acl badDomain dstdomain yahoo.com acl keyword url_regex -i plurk http_access allow manager localhost http_access deny manager # Deny requests to unknown ports http_access deny !Safe_ports # Deny CONNECT to other than SSL ports http_access deny CONNECT !SSL_ports http_access allow localnet http_access allow myDomain # And finally deny all other access to this proxy http_access deny all icp_access allow localnet icp_access deny all #Allow HTCP queries from local networks only htcp_access allow localnet htcp_access deny all visible_hostname testlab # Squid normally listens to port 3128 #http_port 3128 transparent http_port 3129 tproxy #http_port 3128 tproxy transparent cache deny all access_log /usr/local/squid/var/logs/access.log squid #cache_dir null /tmp cache_store_log none cache_effective_user squid cache_effective_group squid when i start my squid proxy the traffic is via ppp0 to internet but url filter rule is notworking !!!!!!!!! this squid.conf is copy from squid 3.0 i use squid 3.1 because i want ctrol the traffic out going multi wan please give me any advice thank a lot