A method in a proxy node (14, 16, 200, 500, 510, 520) for non-transparent interception, the method comprising: - receiving (302, 402) from a first node a primary request comprising: an address of the first node as a source address, an address of a server node as destination address, and an identifier of the primary request; - creating (304, 404) a secondary request based on the primary request, the secondary request comprising: an address to the proxy node as a source address, the address of the server node as destination address, and an identifier of the second request; - sending (304, 406) the secondary request to the server node; - receiving (306, 408) a secondary response from a second node, said secondary response comprising: an address of the second node as a source address, the address of the proxy node as destination address, and an identifier of the secondary response; - checking (308, 410) whether the secondary response matches the secondary request; - when the secondary response matches the secondary request, - identifying (310, 412) the primary request on which the secondary request is based; - creating (312, 414) a primary response based on the primary request and the secondary response, said primary response comprising: the address of the proxy node as a source address, the source address of the primary request as destination address of the primary response, and the identifier of primary request; and - sending (312, 416) to said first node said primary response. - receiving (302, 402) from a first node a primary request comprising: an address of the first node as a source address, an address of a server node as destination address, and an identifier of the primary request; - creating (304, 404) a secondary request based on the primary request, the secondary request comprising: an address to the proxy node as a source address, the address of the server node as destination address, and an identifier of the second request; - sending (304, 406) the secondary request to the server node; - receiving (306, 408) a secondary response from a second node, said secondary response comprising: an address of the second node as a source address, the address of the proxy node as destination address, and an identifier of the secondary response; - checking (308, 410) whether the secondary response matches the secondary request; - when the secondary response matches the secondary request, - identifying (310, 412) the primary request on which the secondary request is based; - creating (312, 414) a primary response based on the primary request and the secondary response, said primary response comprising: the address of the proxy node as a source address, the source address of the primary request as destination address of the primary response, and the identifier of primary request; and - sending (312, 416) to said first node said primary response. - identifying (310, 412) the primary request on which the secondary request is based; - creating (312, 414) a primary response based on the primary request and the secondary response, said primary response comprising: the address of the proxy node as a source address, the source address of the primary request as destination address of the primary response, and the identifier of primary request; and - sending (312, 416) to said first node said primary response.