On Sep 18 2007 14:15, KOVACS Krisztian wrote: > >> Case 2 to imagine: with squid; can use -j REDIRECT instead of -j TPROXY. > >Well, you can, but then you need NAT. Where do I need NAT? Squid will use setsockopt(IP_FREEBIND/IP_TRANSPARENT) and bind(client_src_addr). Which is why -j TPROXY is so puzzling to me.