[squid-users] transparent proxy without client DNS setting

From: Kenneth Oncinian <kenneth.oncinian@dont-contact.us>
Date: Mon, 20 Feb 2006 15:25:28 +0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi List,

My connection to the internet is only through a remote proxy server.
I have been using squid to connect to this remote proxy server using
the cache_peer option ( cache_peer xx.xx.xx.xx parent 8080 0 no-query
default )
and it is working fine if specified manually in the client's browser
setting.

In my attempt to configure a transparent squid using PF, ( squid is
running on the
openbsd gateway ) I have found out that the client is trying to
connect to the
internet using the DNS server configured in the client, which does not
work, because
the DNS server specified in the client is only internal.

This is why squid is working if specified manually in the browser, it
does not use
the DNS setting of the client, but it directs the request to the
parent proxy specified
in cache_peer.

I think I have correctly configured squid and PF to work in
transparent mode since I can see
the traffic being redirected if a site can be accessed by the internal
DNS server, ( example,
websites located in WAN ).

any suggestions for transparent squid to work without the client
having a true DNS server configured?
I hope i have explained this correctly.

regards,

- --

Kenneth P. Oncinian
Panasonic Communications Philippines Corporation
Information Systems Division - Network and Infrastructure Department
- --
PGP Public Key: http://m.1asphost.com/koncinian/koncinian.gnupg.key
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD+W7n9MTaiXoaMBgRAsVcAKCJ7w2V0KlkG7pjJ3da2W7fllAS3wCfSBuM
i/GC7cmvl152XU2HSMXWrXM=
=sGlp
-----END PGP SIGNATURE-----
Received on Mon Feb 20 2006 - 00:25:45 MST

This archive was generated by hypermail pre-2.1.9 : Wed Mar 01 2006 - 12:00:03 MST