rather than "transparent proxy"; switch the readme to match. also tweak the wording to make it clear which firewall reals need to be on which machine when having a router pass off http traffic to squid on a different machine configured as an interception proxy.