I have two quick question about the old cttproxy patches: 1) is "echo 1 > /proc/sys/net/ipv4/ip_nonlocal_bind" needed? 2) is only one iptables rule needed? I am using : "iptables -t tproxy -A PREROUTING -s 10.48.1.0/16 -p tcp -m tcp --dport 80 -j TPROXY --on-port 80 --on-ip 0.0.0.0" and it is not working. I still see the ip of the squid box, and not the original client. It seems as though the problem is in iptables somewhere. I am using this as part of a L3/L4 WCCP/Squid setup and not a bridging solution. I have looked at multiple tproxy howtos...only one worked, and it was a bridging solution on Debian. But I am not using Debian, and I can't use a bridging solution.