greetings, Im stuck and im not sure what part I should re-do. I have an xserve running 10.6.8 I have clients routing through the system just fine with ipfw. they can access the internet via a NAT on the otherside of the squid. compiled squid 3.1.18 Squid Cache: Version 3.1.18 configure options: '--enable-icmp' '--enable-delay-pools' '--disable-htcp' '--enable-ipfw-transparent' '--enable-snmp' '--enable-underscores' '--enable-basic-auth-helpers=NCSA,LDAP' --with-squid=/usr/local/squid-3.1.18 --enable-ltdl-convenience squid starts squid3:sbin root# ./squid -d1X squid3:sbin root# 2011/12/31 15:44:18| Starting Squid Cache version 3.1.18 for i686-apple-darwin10.8.0... 2011/12/31 15:44:18| Process ID 23009 2011/12/31 15:44:18| With 1024 file descriptors available 2011/12/31 15:44:18| Initializing IP Cache... 2011/12/31 15:44:18| DNS Socket created at [::], FD 6 2011/12/31 15:44:18| DNS Socket created at 0.0.0.0, FD 7 2011/12/31 15:44:18| Adding nameserver 10.135.1.21 from /etc/resolv.conf 2011/12/31 15:44:18| Adding nameserver 10.135.1.3 from /etc/resolv.conf 2011/12/31 15:44:18| Adding nameserver 10.135.1.2 from /etc/resolv.conf 2011/12/31 15:44:18| Unlinkd pipe opened on FD 12 2011/12/31 15:44:18| Store logging disabled 2011/12/31 15:44:18| Swap maxSize 0 + 262144 KB, estimated 20164 objects 2011/12/31 15:44:18| Target number of buckets: 1008 2011/12/31 15:44:18| Using 8192 Store buckets 2011/12/31 15:44:18| Max Mem size: 262144 KB 2011/12/31 15:44:18| Max Swap size: 0 KB 2011/12/31 15:44:18| Using Least Load store dir selection 2011/12/31 15:44:18| Current Directory is /usr/local/squid/sbin 2011/12/31 15:44:18| Loaded Icons. 2011/12/31 15:44:18| Accepting intercepted HTTP connections at 10.10.60.55:3128, FD 13. 2011/12/31 15:44:18| HTCP Disabled. 2011/12/31 15:44:18| Squid plugin modules loaded: 0 2011/12/31 15:44:18| Ready to serve requests. 2011/12/31 15:44:19| storeLateRelease: released 0 objects I add the intercept command to ipfw; $cmd 500 fwd 10.10.60.55,3128 tcp from 10.160.0.0/16 to any dst-port 80 in recv en1 I can see the packets being fwd' to squid 00500 5 240 fwd 10.10.60.55,3128 tcp from 10.160.0.0/16 to any dst-port 80 in recv en1 00500 111 6448 fwd 10.10.60.55,3128 tcp from 10.160.0.0/16 to any dst-port 80 in recv en1 00500 117 6832 fwd 10.10.60.55,3128 tcp from 10.160.0.0/16 to any dst-port 80 in recv en1 00500 122 7088 fwd 10.10.60.55,3128 tcp from 10.160.0.0/16 to any dst-port 80 in recv en1 nothing shows up in my access.log, squid never gets the hit. So,.. I think it's compiled correctly, but im not sure if I should re-compile this version or try another. Or maybe try with other options. Anyone know any fancy lsof or greps i can use to find out whats happening ? any suggestions ? - this same setup worked under 3.1.11 with osx 10.5 -j