On 2/06/2015 10:57 a.m., dkandle wrote: > Slight correction to my iptables: > iptables -t nat -A PREROUTING -i eth2 -s 10.1.10.200/28 -p tcp --dport 80 -j > REDIRECT --to-port 3128 > iptables -t nat -A PREROUTING -i eth2 -s 10.1.10.200/28 -p tcp --dport 443 > -j REDIRECT --to-port 3129 > > I also don't understand why the first ip address specification didn't work > but I had to change the 10.1.10.1 to 10.100 which is the exact ip address of > the client. I thought the /28 would have caused this to match any IP address > in the subnet. It does. Those .1 and .100 and .200 are each in completely different subnets. Hint: /28 is not /24. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users