Re: WG: [SQU] Squid behind firewall - DNS Problem

Stolle, Martin wrote:
>
> -----Ursprüngliche Nachricht-----
> Von: Stolle, Martin
> Gesendet: Freitag, 15. Dezember 2000 16:41
> An: 'Magnus Ullberg'
> Betreff: AW: [SQU] Squid behind firewall - DNS Problem
> Wichtigkeit: Hoch
>
> Try to start squid with
>
> /usr/sbin/squid -sYD
>
> which will prevent the reverse name lookup.

Nope. Only the DNS check during startup.

> -----Ursprüngliche Nachricht-----
> Von: Magnus Ullberg [mailto:UllbergM@abcbank.com]
> Gesendet: Freitag, 15. Dezember 2000 16:29
> An: 'Stolle, Martin'
> Cc: 'squid-users@ircache.net'
> Betreff: RE: [SQU] Squid behind firewall - DNS Problem
>
> I'm using Squid2.3STABLE4
> So do I have to modify the code to have it not do a lookup?

It is better to modify the internal DNS to know that there is no
in-addr.arpa information for other networks. How you do that is by
adding an in-addr.arpa zone with only your internal networks.

If you do not have a internal DNS then make sure Squid knows this.
1. Configure the OS to not use DNS (no /etc/resolv.conf, dns not
mentioned in /etc/nsswitch.conf)
2. Build squid with --disable-internal-dns to switch to the "old" method
using the resolver functions of the OS.

--
Henrik Nordstrom
Squid hacker
--
Henrik Nordstrom
Squid Hacker
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html