> 1.) All http traffic from the Client has to be forwarded to the Proxy. > If I could do a simple "if dest_port == 80 then dest_ip = proxy_ip" > in a input_filter for my Client this Problem would be gone. By the way, you don't actually want to modify the destination IP in the packet. You need to keep that intact so that the proxy server knows where the customer originally requested to go. What you need to modify is the next hop only - the MAC address to which the packet will be forwarded. What this implies is that the transparent proxy server must be on the same LAN as the NAS. -Phil ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request at bungi.com To get FAQ'd: <http://www.nealis.net/ascend/faq>