Strange problem in Squid bridge box [SOS]

hello

Somebody help me, My virgin squid bridge box does not works.

Kernel:kernel-2.6.12-1.447-FC.i686.rpm
Squid: squid-2.5 stable9-7.i386.rpm
Ebtables: ebtables-2.0.6-7.fc4.i386.rpm

##bridge box config:
ifconfig eth0 0.0.0.0 promisc up
ifconfig eth1 0.0.0.0 promisc up

brctl addbr br0
brctl addif br0 eth0
brctl addif br0 eth1
ifconfig br0 up
ifconfig br0 192.168.123.97

route add default 192.168.123.254 dev br0  ###192.168.123.254 is the router ip

##squid config:
httpd_accel_host virtual 
httpd_accel_port 80 
httpd_accel_with_proxy on 
httpd_accel_uses_host_header on 

##tables config:
ebtables -t broute -A BROUTING -p IPv4 --ip-proto TCP --ip-destination-port 80  -j redirect --redirect-target ACCEPT
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3128

##Problem:
When I visiting any web site, I got a squid ERROR pages(Access Denied....). 
Directly pointing a workstation at the squid port also get squid Error pages.
If I remove ebtables and iptables rules like this iptable -t nat -F;ebtables -t nat -F;
Directly pointing a workstation at the squid port works fine.

##others
TCP not port 80 works fine.






-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php