Re: [squid-users] DNS lookup failure when transparent proxy

From: dev singh <dev.pratap@dont-contact.us>
Date: Fri, 13 May 2005 17:52:25 +0530

Hi steve,

Start caching DNS on proxy server and put ur server's private ip as
the primary DNS on client and the things will go.

I think the problem with ur existing configuration is that the private
ip which u r using on ur clients , they are not known by ur DNS
server.

r u avle to ping ur dns server from ur clinet . if u r able to do that
than ur configuration will work otherwise it won't.

For more detail reason kindly give a rough sketch of ur setup
Regards
dev

On 5/13/05, Steven Morris <steven.morris@tripleplay-services.com> wrote:
> Hi,
>
> I've installed squid version 2.5 release 9 on redhat linux fedora core 3 and
> setup a proxy server (with 2 ethernet ports) between my LAN and the
> internet.
> I've successfully configured Squid so the proxy server runs transparently
> and intercepts all http requests from clients on the LAN.
> When I enter IP address's (including the IP address for google) in the
> client's web browser URL, the pages are served fine, but when I enter a
> domain name in the URL,
> the browser returns the 'Page Cannot be displayed message'.
>
> The client machine and proxy (in /etc/resolv.conf) both know our ISP
> nameservers IP address and I've configured the proxy server firewall to
> allow DNS lookups via UDP on port 53.
>
> If the client browser is configured to use the proxy server (rather than
> have it run transparently), DNS lookups work fine and domain name URL pages
> are displayed.
> I would however, really like to get DNS lookups working with a transparent
> proxy setup.
>
> I can't see it myself but would this involve changing settings in
> squid.conf?.. or perhaps some form of iptables forwarding command for DNS
> responses on UDP port 53? (ie to forward incoming
> responses from the nameserver to the proxy back to the client machines on
> the LAN).
>
> Any possible solutions would be greatly appreciated.
>
> Regards,
>
> Steve
>
>
Received on Fri May 13 2005 - 06:22:26 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Jun 01 2005 - 12:00:02 MDT