On Mon, 22 Mar 2010 19:37:36 -0300, Ariel <lauchafernandez@xxxxxxxxx> wrote: > hi. list a query, finish putting together a bridge + squid with > tproxy, but I have a doubt with ebtables rules, as in the wiki says > one thing and does another ami me > > only works if I put --redirect-target ACCEPT the end of regulation > instead of DROP > > > Is this right? No. The meaning of "ACCEPT" and "DROP" have different semantics in ebtables. DROP means to stop bridging and perform normal routing rules on the packets. ACCEPT means the kernel will bridge all packets without passing them to Squid or the local host routing. It will get the pages, and externally show the client IP because it really is the client going out. Amos