Re: [squid-users] DNS queries on internal, never direct proxy

On 14/05/11 00:05, Javier Conti wrote:
> Hello,
>
> I have an internal Squid 3.1.12 proxy which has no direct access to
> any sites but instead forwards all request to a few external proxies
> (also Squid 3.1.12).
> To accomplish this, I have 4 cache_peers configured as parent and use
> the "never_direct allow all" directive.
>
> It mostly works as expected, but sniffing the network traffic, I see
> it's trying to resolve, with iDNS via the DNS server configured in
> /etc/resolv.conf, every request it handles.
> Those DNS servers have no access to root servers or to the outside
> world at all, so this proxy never gets a positive answer from the DNS.
>
> How can I completely disable DNS queries on the internal proxy, and
> let just the external proxies do the names resolution?

You have configured it to check the destination IP in a "dst" ACL.
Remove that ACL.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.12
   Beta testers wanted for 3.2.0.7 and 3.1.12.1