Re: [squid-users] ACL with Dynamic DNS

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Sun, 06 Jan 2002 02:05:37 +0100

Lim Seng Chor wrote:

> I am configuring my ACL based on FQDN hostname. My clients are using DHCP. My
> DHCP server updates the zone records to my DNS server. My squid box lookups the
> address through my DNS server.

In this case you should be using the "srcdomain" type ACL, not "src".

> Problem 1 :
> If my client went offline, the A and PTR records will be removed from the DNS server.
> If I am going to "squid -k reconfigure" my squid box it cannot find the hostname.

Use "srcdomain".

> Problem 2:
> If my client used a different ip address after renew it ip lease, the squid box will use it
> old assigned ip address for its acl restriction instead.

Use "srcdomain", and make sure the returned PTR records TTL is
sufficiently low.

Regards
Henrik Nordström
Squid Developer
MARA Systems AB, Sweden
Received on Sat Jan 05 2002 - 18:11:52 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:05:39 MST