Re: Squid on Firewall/DMZ

Proxying caches generally belong in the DMZ, not on the firewall.

--
Henrik Nordstrom
Squid hacker
josepedro@clix.pt wrote:
> 
> Hi! I'm new to using Squid, but i'll have it running on
> the company i'm working; i'm in charge of the changes
> needed to have a better and more secure network.
> So i'll be using the Seattle Firewall, Squid, etc, and i
> wish to know if it's best to run squid on the same
> machine as the firewall or run squid on the DMZ?
> Also, can anyone tell me if there's any server missing in
> my DMZ as i intend to have the following:
> WWW,DNS,SMTP,FTP,PROXY (?).
> We wish to keep the mail server ( Exchange ) in the
> internal network.
> Thanks.
> 
>  PEDRO