From owner-freebsd-questions@FreeBSD.ORG Fri Nov 12 19:42:50 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 91EF616A4CE for ; Fri, 12 Nov 2004 19:42:50 +0000 (GMT) Received: from mail.chrononomicon.com (chrononomicon.com [216.37.143.27]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5113443D45 for ; Fri, 12 Nov 2004 19:42:50 +0000 (GMT) (envelope-from bsilver@chrononomicon.com) Received: from [127.0.0.1] (unknown [192.168.0.42]) by mail.chrononomicon.com (Postfix) with ESMTP id 08C1D1C7CD2; Fri, 12 Nov 2004 14:42:48 -0500 (EST) In-Reply-To: <1a7.2adb9674.2ec66782@aol.com> References: <1a7.2adb9674.2ec66782@aol.com> Mime-Version: 1.0 (Apple Message framework v619) Content-Type: text/plain; charset=ISO-8859-1; format=flowed Message-Id: <0657EFC0-34E3-11D9-A4E4-000D9338770A@chrononomicon.com> Content-Transfer-Encoding: quoted-printable From: Bart Silverstrim Date: Fri, 12 Nov 2004 14:42:45 -0500 To: TM4526@aol.com X-Mailer: Apple Mail (2.619) cc: questions@freebsd.org Subject: Re: Squid+Privoxy or Snort? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Nov 2004 19:42:50 -0000 On Nov 12, 2004, at 2:22 PM, TM4526@aol.com wrote: > In a message dated 11/12/04 1:22:56 PM Eastern Standard Time,=20 > bsilver@chrononomicon.com writes: > > The issue with proxies is that they are a drag on your network; = using > > squid as a firewall only isnt very smart. If you are already using = it > > fine. But on a large network you are better off using a firewall or > > some > > sort of bandwidth management like the stuff on etinc.com. > > >I thought his issue was more on finding internal systems having > >problems and blocking the specific sites from getting hit. > > > >The proxy should speed up access if the same sites are being hit, as > =A0 > The "proxy" doesn't "speed access", the cache does. So using > squidguard without squid enabled, or privoxy or SNORT=A0which=A0are > not=A0caches, is what I was referring to. > =A0 > proxy !=3D Cache > =A0 > which is I think is your confusion. Sorry, I hadn't run across anyone running squid in a non-caching mode=20 so I didn't specify that. SquidGuard is purely a filter and it can't=20 run without squid, to my knowledge. But I could be wrong.=