Offset proxying via linux & fragmented hdd's

    Hi,

    On our network the linux box that does our transparent proxying is
also our squid server. It accomplishes this via ipchains rules using a
local redirect.
    We want to change this so that another linux server uses ipchains to
forward the web traffic to our proxy box. This new linux box is going to
be our master gateway / firewall etc.
    I was going to use ipchains to redirect all port 80 traffic to a local
port then port forward that onto the true proxy server. Is this the best /
most effecient way to do this? Are there any other methods you know of?

    Also, upon reboot, our proxy server shows 30% fragmentation of the
cache drives. Will this affect squids performance at all? I dont know if
squid is directly desgined to work around this or steadily defragment itself.
I intend to use the linux "defrag" program to smooth them out in the
middle of the night, though i have a nasty suspicion it is going to take a while
to defrag 18Gb of hdd space.

    Any comments welcome,
    Thanks,
    Dave

For info on what this jumble below is look right at the bottom.
Type Bits/KeyID Date User ID
pub 2048/BBCA4E3D 1998/01/03 David A Nillesen <dave@northnet.com.au>

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.3ia

mQENAzSuzZAAAAEIALp91sG9Nq85LKUmvQJlF1imz89BSaoJGb5Dx3pSMhsCztFo
l9iLvGDKQoDXFw7g0FKHme2mBypIeNctBnFCC57xFKDjbJz4KIljN1ngPewgwH2e
PlR0Hm/ocIkuh33HnueJYUC8d8bmAACGAavt40Y+5nVxXcbz+6lGUXEzcdnlKh/E
Oo5MDJnLk1cVl8YgdILKT584oCBWbfBvS9pwNyjwX+HW0cX0f8cOLlGJJNtOtUnm
fff1eV5ZXNXEE7YM2uf3p5u/eCtM0poJA8yY3MwhPiu9a4sjRe7zFpBdTGIBJB+8
iEX7IbQf/NsT8hqkg44IpujnjBGBPqGUAbvKTj0ABRG0J0RhdmlkIEEgTmlsbGVz
ZW4gPGRhdmVAbm9ydGhuZXQuY29tLmF1PokBFQMFEDSuzZA+oZQBu8pOPQEB5j4H
/169BcOssg2lXzTFxmR2ifF1rd0k5PlnCSVEE6+h6EtvZ4uPc+zJTbBLqszV2kfr
WRoiSWTzDVMySMYFmOl+azdkedgqS6GBOl+qBC0w88slFj6kXP1lzLuEDT1Hoxta
NQeleOU0hDibnv0losv4rcis7cThD8YClqkiRStw7IBEgStA3d8o+CMGzdzgvMx4
bqTPDRaTSmGA2Pay5am6/uT1gvEbrjSb8QbDkpKav1cUFYOyIQ6k3XoNZX8eUeqB
kl8c4mg3D0Z9pAY+snv8F76mkpodYO3YBBO/kxa9Zl+YT0LOdsq8FNt5RiFi781L
Oad5uMOPWpTFpDL01QABvsE=
=nrSz
-----END PGP PUBLIC KEY BLOCK-----

It's an encryption key. If you have software that will recognize
PGP signed and encoded documents it will add this key to your list.

You can send me email secure against anything currently available.

Australia has recently admitted to being a member of Echelon, a
worldwide interception task force. Echelon intercept ALL traffic
of interest. Make no mistake your email is being read by others.

Would you send a letter without an envelope?
Received on Wed Oct 27 1999 - 19:07:10 MDT