after doing some hours searching, i think i found my problem and possible solution at: http://www.squid-cache.org/mail-archive/squid-users/201304/0051.html http://myconfigure.blogspot.com/2013/03/transparent-squid-332-on-ubuntu-1210.html i wonder why squid had to change its method for transparent mode? because of this, requires extra work to do transparent proxy now. my router only do a regular redirect for every dstnat port 80. this works on squid2.9. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/access-denied-tp4666619p4666629.html Sent from the Squid - Users mailing list archive at Nabble.com.