On Dec 7, 2010, at 5:13 PM, Amos Jeffries wrote: > Your log traces says "Accepting intercepted HTTP connections at 10.0.2.3:3128" So they are NAT interception connections. question on terminology; which one do I use for 3.1 http_port 10.0.2.2:3128 transparent or http_port 10.0.2.2:3128 intercept tnx -j