[squid-users] Re: Appending multiple domains for non-FQDN DNS resolution

From: <dmorton_at_tycoflow.co.nz>
Date: Wed, 30 Sep 2009 15:35:25 +1200






I have now built another Squid server based on 3.0 STABLE19 but am
experiencing the same results.
I can resolve all non-FQDN addresses perfectly (across our three internal
domains) from the server command line yet Squid refuses to query DNS based
on the multiple search domains specified in resolv.conf. I have yet to
disable Squid’s internal DNS as I read its far from the preferred setup in
a modern install.

Any ideas ?

> Hiya,
>
> SITUATION:
> As a lot of companies will struggle with we're cursed with a legacy of
> internal and external services sharing the same domain space (seperate
> authorative servers internally and externally). We have three domains
that
> services can exist on internally, these addresses are not advertised on
> internet based DNS. Squid is setup also as a caching DNS server with
> forwarders to the appropriate servers for the three internal domains as
> well as a default for internet based resolution, this setup works
perfectly
> from the server command line. I can ping any non FQDN and get the correct
> result (three domains in the resolv.conf search string as well as
localhost
> for nameserver) for internal servers as well as internet based FQDN's.
>
> ISSUE:
> The issue is that Squid does NOT apply the domain suffixes as specified
in
> resolv.conf for a non FQDN, it queries literally and fails. The
> append_domain works perfectly for my purpose but i understand it can only
> be used for one domain and not the three i require. As people send links
> around for web based services that are simply
> http://internalserver/site.html I'm a bit stuck as to how to resolve
> against DNS correctly to return the result.

Upgrade your Squid. The ones released in the last year or so should be
handling resolv.conf search properly.


Amos
--
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE19
   Current Beta Squid 3.1.0.13





This e-mail contains privileged and confidential information intended for
the use of the addressees named above. If you are not the intended
recipient of this e-mail, you are hereby notified that you must not
disseminate, copy or take any action in respect of any information
contained in it. If you have received this e-mail in error, please notify
the sender immediately by e-mail and immediately destroy this e-mail and
its attachments."ATTENTION RECIPIENT This email may contain privileged, confidential and/or personal information and is intended only for the use of the addressee. If you are not the intended recipient of this email you must not disseminate, copy or take action in reliance on it. If you have received this email in error please notify the sender immediately and delete the email. The confidential nature of and/or privilege in the documents transmitted is not waived or lost as a result of a mistake or error in transmission. Any personal information in this email must be handled in accordance with the prevailing Privacy legislation in the country of receipt of this email. This email does not necessarily constitute an official representation of Tyco. The content of this email may be reviewed by Tyco and has been logged for archival purposes. Emails may be interfered with, may contain computer viruses or other defects and may not be successfully replicated on other systems. Tyco gives no warranties in relation to these matters."
Received on Wed Sep 30 2009 - 03:35:39 MDT

This archive was generated by hypermail 2.2.0 : Wed Sep 30 2009 - 12:00:03 MDT