[squid-users] Reverse DNS Lookup for client IPs

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
#  TAG: client_db    on|off
#    If you want to disable collecting per-client statistics,
#    turn off client_db here.
#Default:
# client_db on

Feel free to read squid.conf.documented before.

04.02.16 21:06, Stefan Hölzle пишет:
> On 04.02.2016 14:22, Amos Jeffries wrote:
>> On 5/02/2016 12:41 a.m., Stefan Hölzle wrote:
>>> Hello,
>>>
>>> I'm using a squid configured as proxy.
>>> According to the cache log, squid is doing a reverse dns lookup for
>>> client ips:
>>>
>>> 78,3| dns_internal.cc(1794) idnsPTRLookup: idnsPTRLookup: buf is 42
>>> bytes for SOME_SOURCE_IP
>>>
>>> I'm only using the following configuration parameters that might be
>>> relevant for this issue.
>>> external_acl_type
>>> acl aclname src
>>> acl aclname dst
>>> acl aclname dstdom_regex
>>> acl aclname port
>>> acl aclname proxy_auth
>>> acl aclname external
>>> acl aclname url_regex
>>>
>>> Any ideas why squid is doing PTR lookups anyway ?
>> Because that list is incomplete.
>>
>> The format parameters for external_acl_type, any *_extras rules for
>> helper formats, and logformat rules also may make use of the client
>> hostname (if any).
>>
>> Also, anyone viewing the cachemanager clientdb report will trigger some
>> as the report is generated.
>>
>> Amos
>>
>> _______________________________________________
>> squid-users mailing list
>> squid-users at lists.squid-cache.org
>> http://lists.squid-cache.org/listinfo/squid-users
> Thanks for the quick reply Amos.
>
> * Used formats for external_acl_type are: %LOGIN, %SRC
> * There are no *_extras rules defined (store_id_extras
> <http://www.squid-cache.org/Doc/config/store_id_extras/>,
> url_rewrite_extras
> <http://www.squid-cache.org/Doc/config/url_rewrite_extras/>)
> * logformat defaults are used (there should be nothing in there
> responsible for a ptr lookup)
>
> I guess its the cachemanager then.
> There are actually PTR results listed in the client_list of the
> cachemanager.
>
> I tried blocking access to the cachemanager by adding the folling rule:
> http_access deny manager
>
> However, squid still does PTR lookups.
> How can I prevent the clientdb reports to be generated ?
>
>
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJWs2mUAAoJENNXIZxhPexGDSoH/i0/IoFP9v/evo5D8U040CbQ
MReG2VxDdgvm/2ev0uOywOCKyDC2zJR+k45quocwImWBlFx7hevg0u2DJ1DpEoy6
5j0jbAQn/qhFLA7Rtz9HADPXtejmJBJdC4SYH4iK6f/2cVFKxOqLrvXo8yLFikWW
SCwWYBptauDH6ZFu9poXVR2tK7X8yMZDmhEhF2eNo70bHefn2fvrtBXv66NrYxpp
vQtduE9U7MXjq9Os/c7LOtatJX+lU6ZOJvRWNBFiNRkXJzr79u/poRwvSUJ4gS+t
iZaqslMdQ2PpDjkEIesZ9A3uhw1aJYZAzsBH6NAymd8BUGQPLufBbKGCkDddzGg=
=kg35
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160204/a40c4f57/attachment-0001.html>