Proxy Server -- 2 NICs and Firewall 1

[Bonj87]

Im setting up our proxy server. (proxy 2.0).
Im also trying to convince our firewall "expert" that the server should be dual nic'd. Once NIC in the DMZ, one NIC on the internal LAN. Internal NIC would have no default gateway. IPSec turned on, IPforwarding turned off. The external NIC would have the SERVER, WORKSTATION, and WINS services UNBOUND from that adapter.
Is this correct? Or, is this simply a "hole" in the firewall?

 

[Gassner]

I think you would have much more security, cause you will limit their access to http and ftp. Users accessing directly internet is much more dangerous. A proxy server before a firewall is always welcome, mostly when you think of url filtering.
The only point is to take good care of the log files.

Best Regards

Rafael Gustavo Gassner