Re: [squid-users] udp_incoming_address restriction problem

The problem is, DNS cannot be found. Setting the udp_addresses in squid influences not only ICP but also the DNS UDP packets (?). Taking private addresses like 192.168.0.1 for ICP results in the server can't reach my DNS-Server over the second, external interface. A workaround could be to set the udp_outgoing_address to the external IP. By this the DNS can be requested again, but then the ICP between the two proxies does not work anymore. I see no other solution than to listen for udp on all addresses (the default) and firewall the system externally.

- Oliver

> I have two squid siblings, which make ICP queries between 192.168.0.1
> and 192.168.0.2. They are working perfectly until I try to restrict the
> udp_incoming_address to these two IP's in this manner:
>
> server1:
> udp_incoming_address 192.168.0.1
> udp_outgoing_address 255.255.255.255
>
> server2:
> udp_incoming_address 192.168.0.2
> udp_outgoing_address 255.255.255.255
>
>
> After doing this and restarting both, squid answers no requests of my
> browser :-(
>
> It only works again, if I configure the defaults
>
> udp_incoming_address 0.0.0.0
> udp_outgoing_address 255.255.255.255
>
> on both machines.
>
> Is there something wrong with Squid Cache Version 2.5.STABLE1 on Linux
> 2.4.20?
> Have I forgotten a compile option for UDP/ICP?
Received on Fri Jan 17 2003 - 15:19:27 MST