Прозрачный прокси SQUID (Доступ запрещен)

#!/bin/sh
INTERNAL_NETWORK="192.168.1.0/24" 
ROUTER_IP="192.168.1.1" 
PROXY_SERVER="192.168.1.2" 
PROXY_PORT="3128" 

iptables -t nat -A PREROUTING -i br0 -s $INTERNAL_NETWORK -d $INTERNAL_NETWORK -p tcp --dport 80 -j ACCEPT 
iptables -t nat -A PREROUTING -i br0 -s ! $PROXY_SERVER -p tcp --dport 80 -j DNAT --to $PROXY_SERVER:$PROXY_PORT 
iptables -t nat -A POSTROUTING -o br0 -s $INTERNAL_NETWORK -d $PROXY_SERVER -p tcp -j SNAT --to $ROUTER_IP 
iptables -I FORWARD -i br0 -o br0 -s $INTERNAL_NETWORK -d $PROXY_SERVER -p tcp --dport $PROXY_PORT -j ACCEPT

http_port 3128 transparent
http_port 0.0.0.0:3128 transparent

dns_nameservers 192.168.1.2
cache_mgr me@876974.ru

acl localnet src 192.168.1.1-192.168.1.254/255.255.255.0
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT

http_access allow localhost manager
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
http_reply_access allow all

http_access allow localhost
http_access allow localnet
http_access deny all

minimum_object_size 10 KB
maximum_object_size 8192 KB

cache_log /dev/null
access_log none
cache_store_log none

#cache_mem 1024 MB
cache_dir ufs /srv/Cache 50000 16 256
coredump_dir /srv/Cache

cache_swap_low 90
cache_swap_high 95

acl block_ext urlpath_regex -i "/etc/squid3/blocks.ext.acl"
cache deny block_ext

refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320

cache_effective_user proxy
cache_effective_group proxy

forwarded_for off