Hi reyk, many thanks for the reply. > - revert /dev/pf to the old 0600 permissions reverted. Now it is set to default. pls see below. # ls -al /dev/pf crw------- 1 root wheel 73, 0 Apr 1 19:30 /dev/pf > - recompile squid _without_ --enable-pf-transparent (disable it) recompiled without --enable-pf-transparent pls see squid configuration option ( Now, no --enable-pf-transparent option) # squid -v Squid Cache: Version 3.2.0.6 configure options: '--datadir=/usr/local/share/squid' '--enable-arp-acl' '--enable-basic-auth-helpers=NCSA' '--enable-digest-auth-helpers=password' '--enable-delay-pools' '--enable-external-acl-helpers=ip_user' '--enable-forw-via-db' '--enable-negotiate-auth-helpers=squid_kerb_auth' '--enable-removal-policies=lru' '--enable-ssl' '--enable-storeio=aufs' '--with-pthreads' '--localstatedir=/var/squid' '--prefix=/usr/local' '--sysconfdir=/etc/squid' '--mandir=/usr/local/man' '--infodir=/usr/local/info' --enable-ltdl-convenience > - update your pf.conf to use divert-to instead of rdr-to updated. Pls see below. pass in log on $int_if proto tcp from $lan_net to any port 80 \ divert-to 127.0.0.1 port 3129 but, still now luck. any comments ? -- Thank you Indunil Jayasooriya