> iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT > --to-port 3128
You are redirecting all your port 80 packets to squid, so you should be also having a rule like iptables -A INPUT -i eth1 -m state --state NEW -p tcp --dport 3128 -j ACCEPT > iptables -A INPUT -i eth1 -m state --state NEW -p tcp --dport 80 -j ACCEPT This rule will never be executed because all the port 80 packets are already redirected to 3128 (squid). So you can just delete this rule. You can configure squid to request from the local webserver and respond to your queries. All the request will be however cached by squid. ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf _______________________________________________ linux-india-help mailing list linux-india-help@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/linux-india-help