On 27/06/2015 12:14 a.m., Alex Samad wrote: > aren't squid and nat box different ? that was my presumption.. > Best not to. The dst-IP:port on the TCP packets entering the Squid machine is where Squid will send the outgoing server requests. If that dst-IP is the IP of the Squid machine itself you get into big DoS-level trouble really fast. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users