Hi Brian, In other words you have yet a third subnet (for maybe fat clients) that you are wanting to force proxy for,correct? It appears your iptables right now is forcing the proxy for your 192.168. network. I must misundertand ? You said to "bypass" for 192.168.?? What is the subnet range you want to force your proxying into? Barry Cisna