On Fri, Dec 26, 2008 at 7:50 PM, System Administrator <ad...@bitwise.net> wrote:

> Here is a hint to simpler life: to avoid assymtric routing make sure
> that all you redirect (RDR) rules fully traverse the firewall, i.e. the
> source and destination are connected to different interfaces. In your
> case that would mean that the squid proxy should either run on the
> firewall or reside outside the firewall (and each of these solutions
> has its own advantages).

can move squid in dmz solve the trouble?
-f


Reply via email to