Three IPFire, in chain

I want to split the network with three IPFires.
The first, immediately after the router, will be the one who will take care of security with IDS, Guardian, DHCP, DNS, OpenVPN, etc.
The other two, downstream of the first IPFire, must limit themselves to managing only the Proxy with the Web filter and Update Accelerator.
Eventually these two refer to the Web Proxy present on the first IPFire.

It can be done?

Hi,

to my knowledge: Yes.

Just configure the first IPFire machine as an upstream proxy in it’s downstreams.

Thanks, and best regards,
Peter Müller