hi. i'm make a bridge whit open suse 10.2 and get tproxy patched on the box. all step has finished,and no error... at the squid acceess.log i see the request traffict from client ip, but why on the web server log or on the router the request for the web is came from the bridge ip not the original ip ( client ). I have net.ipv4. & ip_nonlocal_bind = 1 my squid get compiled whit --enable-linux-tproxy. when i tcpdump on the ethetnet that shown a request / search the dns / ip of the destination server but, the squid did not request the web.and the client get error message ( 22 ) here is my network diagram : Client ( 10.0.0.0/24 ) < -- > | eth0 = Bridge = eth1 | <--> router (10.0.0.254) <--> web srvr | tproxy + squid 2.6 stable 21 here the script : ifconfig eth0 down ifconfig eth1 down ifconfig eth0 0.0.0.0 up ifconfig eth1 0.0.0.0 up brctl addbr br0 brctl addif br0 eth0 brctl addif br0 eth1 ifconfig br0 10.0.0.250 up route add default gw 10.0.0.254 brctl stp off btctl setfd br0 off ebtables -t broute -A BROUTING -p IPv4 --ip-protocol 6 --ip-destination-port 80 -j redirect --redirect-target ACCEPT iptables -t tproxy -A PREROUTING -i br0 -p tcp -m tcp --dport 80 -j TPROXY --on-port 3128