Squid / Squidguard - or go with freestanding instances?