1 - Your iptables is missing DNAT target, you may try using REDIRECT target. 2 - In Squid 3.1+ the transparent option has been split. Use 'intercept to catch DNAT packets. 2014-07-03 11:25 GMT-03:00 Mark jensen <ngiw2012@xxxxxxxxxxx>: > I have follow this tutorial to redirect HTTP traffic to the squid listening on 8080: > > http://wiki.squid-cache.org/ConfigExamples/Intercept/AtSource > > My questions are: > > 1- when I try to do this command: > > iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination SQUIDIP:8080 > > > an error returns: unknown option "--to-destination" (iptables version1.4.7) > > > 2- I'm using squid3.1.10 what option should I chose: > > http_port 8080 transparent > > > > OR > > > http_port 8080 intercept > > mark > >