generic proxy (i.e. content inspection)