Have a look here for a correct solution: http://wiki.squid-cache.org/ConfigExamples/Intercept/AtSource (Example: Replace SQUIDIP with the public IP which squid may use for its listening port and outbound connections. ) iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination SQUIDIP:3129 -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Waiting-for-www-tp4666774p4666779.html Sent from the Squid - Users mailing list archive at Nabble.com.