Re: Re[5]: [squid-users] reverse DNS by squid when using parent proxy

From: Squid Support (Henrik Nordstrom) <hno@dont-contact.us>
Date: Mon, 18 Feb 2002 16:57:27 +0100

On Monday 18 February 2002 06.19, Colin Campbell wrote:

> You never need to popul;ate the zone files. All you need is to be
> authority for a zone file. If the file is empty, the nameserver
> returns a NXDOMAIN error immediately. If you don't have the zone at
> all, the nameserver will go looking for someone who does and will
> take much longer.

And for reverse lookups, is it the in-addr.arpa zones you need to
create, not the forward domains..

In a private DNS who should not ever perform reverse lookups other
than locally registered IP addresses you can add a empty zone
defininition for in-addr.arpa, and you will quickly terminate all
IP->Name lookups for addresses not registered locally.

Of if the local DNS is fully disconnected from the Internet then you
should have your own root record. This will make all DNS lookups of
data not registered locally to fail immediately.

-- 
MARA Systems AB, Giving you basic free Squid support
Customized solutions, packaged solutions and priority support
available on request
Received on Mon Feb 18 2002 - 09:06:33 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:06:25 MST