On Mon, 2008-08-18 at 13:50 +0200, aleksandarn@sbb.rs wrote:

Is this OK?

dmesg log:

ip_tables: (C) 2000-2006 Netfilter Core Team NF_TPROXY: Transparent proxy support initialized, version 4.1.0 NF_TPROXY: Copyright (c) 2006-2007 BalaBit IT Ltd. nf_conntrack version 0.5.0 (16384 buckets, 65536 max)

Yes, it seems to be ok. Can you strace the squid process as it tries to set IP_TRANSPARENT on the socket? -- Bazsi