hello again ;), Ok thanks to all you guys who have help as i've got the masqurading working now with the DNS resolution. What I need now is to be able to force the local network users to use the squid proxy and not access the net directly. I tried adding this:- FW_REDIRECT_TCP="192.168.0.0/24,0/0,80,3128" but when i restarted the script i got:- ipchains: No target by that name (Maybe this kernel doesn't support transparent proxying?) the script doesn't return any error when restarted but if I try accessing the net i have no problems but it doesn't go through the proxy (which i need for extra secuirty). im using 6.4 with a 2.2.14 kernel staright outta the box do i need to recompile the kernel or is it another setting i've missed, screwed up or not prayed to properly ;) -- Stuart Hodgkinson Software Engineer "When bashing the keyboard into your forehead just isn't enough."