On Fri, Dec 26, 2008 at 7:50 PM, System Administrator <ad...@bitwise.net> wrote:
> Here is a hint to simpler life: to avoid assymtric routing make sure > that all you redirect (RDR) rules fully traverse the firewall, i.e. the > source and destination are connected to different interfaces. In your > case that would mean that the squid proxy should either run on the > firewall or reside outside the firewall (and each of these solutions > has its own advantages). can move squid in dmz solve the trouble? -f