> And unfortunately internal-server.domain.com does _not_ > translate to external-server.domain.com in public DNS ???
The internal-server isn't not reacheable from internet, and SQUID PROXY is in a DMZ. Nobody can access to the internal network from internet. For security, I would like to use SSL between CLIENTS and PROXY SQUID. Yann