On 17/02/2012 9:32 p.m., Muhammad Yousuf Khan wrote:
By "consolidated squid firewalls " did you mean security systems which
include both firewall software and Squid as sub-sections of the overall
system?
yes exactly this is what i want actually i am replacing ISA server
from our environment therefore i want to make this squid box smiler to
ISA. so i want some features of NAT on this squid proxy box to NAT all
the other traffic except Squid related. i just wanted to allow three
more ports for different functionality. therefore i asked for help
from experienced users that what they suggest in this scenario.
because i don't wana use MS ISA any more however i need to make squid
box to look similer to MS ISA box. at least basic features should be
there which ISA is already providing. like Firewall features.
Aha. Okay. We have had a few admin the last few years converting from
ISA tO Squid. Some older Squid have slightly different behaviour for
NTLM which can seem a little weird at first. But other than that nobody
has mentioned any HTTP features lacking.
http://www.linuxquestions.org/questions/linux-security-4/isa-vs-squid-613656/
I have had a passing view of both Smoothwall and ClarkConnect systems.
They did seem good and either one may do exactly what you are looking for.
I'm addicted to a iptables configurator called "ferm" myself. Its a
command line tool that takes a nice easy to understand config file
format and builds iptables rules. Same level of control and flexibility
as iptables itself, but easier to read and understand the configs.
Amos
