From: "Krzysztof Syguda" <ks at koszecin dot net dot pl>

> Let me explain it more detailed

> I have an internal network e.g. 10.1.1.0/24  m0n0wall has LAN interface in 
> this network with 10.1.1.2/24  IP address.
> m0n0wall has one WAN interface and one OPT (OPT1) interface with 
> 10.1.4.2/24 IP address to connect DMZ.

> In DMZ I have a www/ftp proxy server with IP: 10.1.4.4/24 working on port 
> 8080.

It is always best when you tell us what you want to do, not how you are 
failing to do it.  :-)  First, set your clients back to normal, with no 
proxy.  Let them authenticate with CP. Have m0n0wall redirect all port 80 
and port 443 traffic to your proxy.  Something like this;

<nat>
 <rule>
  <protocol>tcp</protocol>
  <external-port>8080</external-port>
  <target>10.1.4.4</target>
  <local-port>80</local-port>
  <interface>lan</interface>
  <descr>redirect HTTP to proxy server</descr>
 </rule>
 </nat>

                        Lee