i read the iptables tutorial but i am still unclear about the use of dnat with squid. if my understanding is correct, when a client enters a url to point to google.com for example, the firewall's dnat changes that destination ip address to that of the squid server. but then how does squid know where to send the packet to google if that address was changed?