[squid-users] Blocked DNS request from IDS causes Squid to not work

[markme]

I've been running Squid 3.3.8 on CentOS 7 for a few months now and every now
and then I will get a "Suspicious .pw DNS query" alert from my IDS which was
caused by Squid and it will be blocked. When this happens most clients start
to get a 503 error or NONE_ABORTED/000 in the access log and they can't
access the internet. To fix it I have just been issuing a reconfigure on
Squid and that seems to fix the problem until it happens again. Just that
one particular DNS query to our local DNS server gets blocked but everything
else goes through. Any ideas on what might be making Squid require a
reconfigure to start working again? Thanks!



--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Blocked-DNS-request-from-IDS-causes-Squid-to-not-work-tp4672281.html
Sent from the Squid - Users mailing list archive at Nabble.com.