Firewall/NAT

Hi everyone.
I want to do like this :
wan <- m0n0wall -> bridge proxy -> lan
wan <- 192.168.160.234 - m0n0 - 10.99.176.1 -> 10.99.176.2 -> 10.99.176.5 (gw 10.99.176.1)
                       em0             m0n0       rl0                 br0(eth0+eth1)

m0n0 has a two nic
bridge has a two nic as a one bridge

i want all lan 80. port traffic also go to squid on bridge for url filtering etc.

everything fine until enabled captive portal. when i enabled cp login page appears on client when the client authenticate (seen on cp status) browser shows login page again not the requested website. any ideas?

Bridge iptables rule :

Code:

iptables -A INPUT -i br0 -p tcp -d 10.99.176.2 -s local-network --dport 3128 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -t nat -A PREROUTING -i br0 -p tcp --dport 80 -j REDIRECT --to-port 3128

ps : sorry for my english

If u config squid for transparent mode authentication is not possible. In ur case as my concern u can config ur proxy not to cache monowall pages.