Thank you for the input. I will do that sometime later and report back when I have new info.
----- Original Message ----- From: Eliezer Croitoru <elie...@ngtech.co.il> they indeed are not suppose to fail your setup but it's not suppose to be symmetric with tproxy. the idea of the bridge is that you have clients side and external side that you abuse both. if you make it this way for a purpose it's another story. i would say that the result can show some really nasty issue you are having in the network level and ebtables+switch is the basic thing to check. i will try to dump the tcp sessions on the interfaces using: tcpdump -i any -X -s0 -n port 80 -w test.pcap i will be happy to look into the packets to see if there is a clue in them saying something about the "zero reply". to make sure it's not squid issue try to install the rpm of squid 3.2 http://pkgs.org/fedora-16/fedora-i386/squid-3.2.0.12-1.fc16.i686.rpm.html i have tested it on fedora 15-16 and still the same result that it works both on 3.1.X and 3.2.X. you can try to play with stp on\off on the bridge for case of packets getting lost somewhere by STP filters. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer <at> ngtech.co.il