0

Is there a way to configure squid 3.5.1 to use TCP for DNS lookups?

I've setup up the proxy server to use TCP for lookups by adding "options tcp" to my /etc/resolv.conf, but squid seems to be doing its own thing.

  • How did you get the idea that options tcp would do anything? I see no mention of tcp anywhere in man resolv.conf, and I didn't find a single program using TCP for DNS lookups even with that option. – kasperd Aug 23 '15 at 10:26
  • @kasperd you're probably a Linux user - I thought I mentioned I was on OpenBSD, but apparently not. – paxos1977 Aug 24 '15 at 20:34
1

Use your firewall to reject (not drop) UDP packets from squid. It'll soon get the message. I do wonder why on earth you'd want to do this, though.

| improve this answer | |
  • It shouldn't have to "get the message" I should be able to do this using configuration. – paxos1977 Aug 8 '15 at 19:03
  • 1
    @paxos1977 You can if you recompile squid. But that doesn't answer the question of why you are trying to do this. It's a Very Bad Idea. At least, it's a bad idea if you have to handle the "The internet is slow" calls... – Michael Hampton Aug 8 '15 at 20:48
  • 1
    "Should" is a moral imperative. – womble Aug 8 '15 at 22:18
  • @womble yes it is, I should go fix that. – paxos1977 Aug 9 '15 at 23:27
  • @Michael Hampton that's not really your concern. – paxos1977 Aug 9 '15 at 23:28

Not the answer you're looking for? Browse other questions tagged or ask your own question.