Since I can no longer run the squid proxy on the RT-AC87 like I did with my RT-N66U via entware I have been trying to configure iptables to forward port 80 requests from the AC87 to the squid running on the N66U. So far I haven't been able to make this work. I have been all over the squid site and other sites that have sample IP table entries and I guess my skill with iptables only applies to really simple things. Here is what I have configured so far: Internet gateway (AC87) - 192.168.10.252 squid box (N66U) - 192.168.10.253:3128 network mask: 255.255.255.0 Below are the tables I put together from research for the AC87: iptables -t nat -A PREROUTING -i br0 ! -s 192.168.10.253 -p tcp --dport 80 -j DNAT --to 192.168.10.253:3128 iptables -t nat -A POSTROUTING -o br0 -s 192.168.10.0/24 -d 192.168.10.253 -p tcp -j SNAT --to 192.168.10.252 iptables -I FORWARD -i br0 -o br0 -s 192.168.10.0/24 -d 192.168.10.253 -p tcp --dport 3128 -j ACCEPT Has anyone else tried to do an on lan transparent proxy? Thanks.