Hi Amos, Thanks for reply. ++++++++++++++++++++++++ local=*10.58.200.33:80 remote=10.210.83.249:*3375 FD 10 flags=33: accepted ++++++++++++++++++++++++ since squid is able to understand which client is requesting and following lines talks about request.. ++++++++++++++++++++++++ parseHttpRequest: parseHttpRequest: req_hdr = {Host: www.wikipedia.org User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:35.0) Gecko/20100101 Firefox/35.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive } ++++++++++++++++++++++++ you still feel there could be issue with Cisco erasing original dst-IP value.?? The thing is Cisoco ISG is not managed by us. They are saying they've configured any incoming traffic from clients for web its redirected to squid's IP. I'm no expert on Cisco ISG, yet I've asked them to share the config pertaining to squid. I am awaiting their response. Can you help me what should I ask them or point towards to check..and what type squid/iptables config combination should I do on my squid server given my network scenario. Thanks & Regards, Jaykbvt -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/transparent-proxy-original-dst-err-tp4670846p4670852.html Sent from the Squid - Users mailing list archive at Nabble.com. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users