I use simple queues to control bandwidth for customers behind masqueraded networks. I have set up a transparent proxy in order to facilitate bandwidth management for frequent downloads such as Windows Update. However now I find that simple queues don't come into play anymore because the transparent proxy is intercepting the traffic and sending it out as source address of the proxy server. Inbound traffic from my customers aren't reaching the public interface because the proxy is working. So clients aren't port 80 traffic is not shaped anymore.