[squid-users] place squid before or after firewall

[donovan]

greetings

I have a new cisco pix 525 and i would like to setup squid /  
squidguard for transparent filtering.

Should i place squid on the inside of the pix or the outside? or can  
i create a 3rd interface specifically for filtering?

user ---> [ pix nat] --[ squid/squidguard] --[router] --inet

or

user --->[squid/squidguard] --[pix nat ] --[router] -- inet

or

user --[ pix ] -- [router] - inet
                |
                |
        { squid /squidguard }


your comments and flames welcome :)

--jeff