On Monday 31 January 2011 07:46, Jobst Schmalenbach wrote: > iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j DNAT --to > $PROXY:3128 iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 443 -j > DNAT --to $PROXY:3128 > > browser tell me "invalid request". From the man pages: DNAT --to-destination ipaddr[-ipaddr][:port-port] You could combined these two rules into one with Multiport. Check the MAN pages. -- Regards Robert Linux The adventure of a lifetime. Linux User #296285 Get Counted http://counter.li.org/