On Oct 31, 2011, at 7:02 AM, Tymur Islam wrote: > Hi Everybody, > > Is it possible to do Transparently Proxy of https (i.e. face book, gmail > etc) traffic? > > If no, how and why https traffic works through NAT/Masquerade? > > Please help me to understand the above. > > Thanks > > TI not through squid, use ip tunnel through squid box and have your firewall NAT/PAT the https connection. squid will not speak directly in intercept mode. - simply put. if you need to proxy https connections use squid in regular mode. -j