place squid before or after firewall

[donovan <donovan@xxxxxxxxxxxxxx>]

greetings

I have a new cisco pix 525 and i would like to setup squid /  
squidguard for transparent filtering.

Should i place squid on the inside of the pix or the outside? or can  
i create a 3rd interface specifically for filtering?

user ---> [ pix nat] --[ squid/squidguard] --[router] --inet

or

user --->[squid/squidguard] --[pix nat ] --[router] -- inet

or

user --[ pix ] -- [router] - inet
		|
		|
	{ squid /squidguard }


your comments and flames welcome :)

--jeff