proxying router or Squid?

I hear security people recommending using proxying routers instead of
proxy software such as Squid.

Is using such a router now preferable to using proxy software?


Thanks.

John Sandell

In comp.os.linux.security John Sandell <jsandell@att.net>:

> I hear security people recommending using proxying routers instead of
> proxy software such as Squid.

> Is using such a router now preferable to using proxy software?

Could you elaborate what you have in mind? Sounds bogus, a router
does route packets, a proxy like squid works on another network
layer then routing takes place.

--
Michael Heiming (X-PGP-Sig > GPG-Key ID: EDD27B94)
mail: echo zvpunry@urvzvat.qr | perl -pe 'y/a-z/n-za-m/'
#bofh excuse 444: overflow error in /dev/null

Michael Heiming wrote:
> In comp.os.linux.security John Sandell <jsandell@att.net>:
>
>>I hear security people recommending using proxying routers instead of
>>proxy software such as Squid.
>
>>Is using such a router now preferable to using proxy software?
>
> Could you elaborate what you have in mind? Sounds bogus, a router
> does route packets, a proxy like squid works on another network
> layer then routing takes place.
>
So I've always thought... now I'm told that Cisco, among others, makes
routers that replace proxy software...

It's for a small Web site.

John

In comp.os.linux.security John Sandell <jsandell@att.net>:
> Michael Heiming wrote:
>> In comp.os.linux.security John Sandell <jsandell@att.net>:
>>
>>>I hear security people recommending using proxying routers instead of
>>>proxy software such as Squid.
>>
>>>Is using such a router now preferable to using proxy software?
>>
>> Could you elaborate what you have in mind? Sounds bogus, a router
>> does route packets, a proxy like squid works on another network
>> layer then routing takes place.
>>
> So I've always thought... now I'm told that Cisco, among others, makes
> routers that replace proxy software...

You mean they can do NAT? This isn't a proxy like squid, it just
connects clients directly to the outside.

> It's for a small Web site.

Why does it need a proxy, presuming reversed in front?

--
Michael Heiming (X-PGP-Sig > GPG-Key ID: EDD27B94)
mail: echo zvpunry@urvzvat.qr | perl -pe 'y/a-z/n-za-m/'
#bofh excuse 265: The mouse escaped.