clients -> squid -> router1 router1 -> squid -> client with router1, squid, client on same subset. router1 need to be distination routed to squid. the tproxy setup fails but redirect port works fine when client ->squid-> router1 router-> clients Linux ubuntu 2.6.32-25-generic-pae #45-Ubuntu SMP Sat Oct 16 21:01:33 UTC 2010 i686 GNU/Linux iptables v1.4.4 libcap-dev 1:2.17-2ubuntu1 libcap2 1:2.17-2ubuntu1 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.