firewall2 / caching proxy question