Re: Squid server and Firewall

Generally I place squid on the firewall with two network connections. The
outside network has an address appropriate for the external service
provider. The internal network has an address appropriate for your internal
site. Squid itself mediates between the two address spaces.

DANNY KHALIL wrote:

> We have the squid server located on the DMZ, meaning that internal
> users will have to go thru the firewall which does NAT to get to
> the squid proxy.
>
> I am thinking that this is not such a good idea, and maybe I should move
> the squid server to the internal network so that users will get
> to it before going thru the Firewall and the NAT deal. what do you
> think? would I be cutting down on delays and load on the firewall
> since the FW would be performing NAT on the squid IP only and not on
> any client trying to access the cache.
>
> any thoughts are appreciated.
>
> -Danny-

--
Regards.
Don Rolph w-rolph@ds.mc.ti.com WD3 MS10-13 (508)-236-1263