Greetings, I have a a transparent squid in a private net with a 1-1 NAT, Im trying to get a good understanding of what my clients look like to the outside. What is the Default setting " for forwarded_for" if my system is running intercept? to my understanding if I leave the X-Forwarded-For header my natted clients ip will be the visible requestor ? in the past did we strip that out or is it something new? is there a way to have the final request return the global NAT ip of the client ? currently squid seems to be the final, i think. can someone clarify this option for me, thanks -j 192.168.1.2 ---> 192.168.1.1[ squid]10.10.10.1 -- 10.10.10.2 [ IP NAT ] -- GLOBAL forwarded_for New setting options. transparent, truncate, delete. If set to "transparent", Squid will not alter the X-Forwarded-For header in any way. If set to "delete", Squid will delete the entire X-Forwarded-For header. If set to "truncate", Squid will remove all existing X-Forwarded-For entries, and place itself as the sole entry.