Proxy on firewall or behind it?

[Christian Volk <debian@volkedv.de>]

Hi!

I'm in the process of setting up a leased line/static IP internet connection 
with the option of a DMZ and a second firewall.

To simplify the firewalls, I'm thinking about moving the http proxy (squid) 
from the firewall machine to a machine behind the firewall.

Are there any additional security risks with the proxy on the intranet?

Thanks!

- Christian