<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#464646" bgcolor="#FFFFFF">
<br>
<font face="monospace">We note that Squid performs a client DNS PTR
query each time client sends query.<br>
<br>
We have taken care to ensure that<br>
<br>
</font>
<ul>
<li><font face="monospace">that the log model does not use machine
names </font></li>
<li><font face="monospace">No acls concerning workstation
hostnames are added.</font></li>
</ul>
<font face="monospace"><br>
We use kerberos authentication with Squid: is
negotiate_kerberos_auth/process plugin is able to perform PTR
requests?<br>
<br>
Is there another option that denies squid to perform such
requests?<br>
</font><br>
Regards<br>
</body>
</html>