[squid-users] access blocking using DNS -> "NO Address records in response to '....'

[Paul Neuwirth]

On Wed, 3 Jan 2018 08:30:36 +0100
Paul Neuwirth <mail at paul-neuwirth.nl> wrote:

> Hello list,
> 
> named is configured to block (resulting in NXDOMAIN) some domains.
> Using squid I have following problem:
> Browser requests such a blocked URL  and named is not delivering an
> error, request never times out... 
> How can I make squid deliver an error in this case.
> 
> From the logs i see:
> 2018-01-03T08:00:49.750777+01:00 alpha squid[24532]: ipcacheParse: No
> Address records in response to 'www.googletagmanager.com'
> 
> in time of request.
> 
> If request is aborted:
> 
> 2018-01-03T08:03:00.163354+01:00 alpha squid[24532]: 1514962860.163
> 10414 172.18.0.26 TCP_MISS_ABORTED/000 0 GET
> http://www.googletagmanager.com/ - HIER_NONE/- -
> 
> Thank you for help. If you need any further information, i may
> deliver.
> 
> Thank you
> 
> Paul
> 
> OS: OpenSUSE Leap 42.2
> 
> # zypper if squid
> Information for package squid:
> ------------------------------
> Repository     : opensuse_updates               
> Name           : squid                          
> Version        : 3.5.21-5.3.1                   
> Arch           : x86_64                         
> Vendor         : openSUSE                       
> Installed Size : 10.0 MiB                       
> Installed      : Yes                            
> Status         : up-to-date                     
> Source package : squid-3.5.21-5.3.1.src

Sorry, just a minute after sending I found out, named is not delivering
NXDOMAIN, but nothing
# dig www-googletagmanager.l.google.com

; <<>> DiG 9.10.4-P5 <<>> www-googletagmanager.l.google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50108
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www-googletagmanager.l.google.com. IN	A

;; AUTHORITY SECTION:
www-googletagmanager.l.google.com. 21600 IN SOA	ns1.domain.com.
hostmaster.domain.com. 1 10800 3600 86400 21600

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Jan 03 08:33:08 CET 2018
;; MSG SIZE  rcvd: 120