[squid-users] access blocking using DNS -> "NO Address records in response to '....'

[Amos Jeffries]

On 03/01/18 20:34, Paul Neuwirth wrote:
> On Wed, 3 Jan 2018 08:30:36 +0100
> Paul Neuwirth wrote:
> 
>> Hello list,
>>
>> named is configured to block (resulting in NXDOMAIN) some domains.
>> Using squid I have following problem:
>> Browser requests such a blocked URL  and named is not delivering an
>> error, request never times out...
>> How can I make squid deliver an error in this case.
>>

...
> 
> Sorry, just a minute after sending I found out, named is not delivering
> NXDOMAIN, but nothing

Nod. That is the cause of the "NO address records" log entry.

The client appears to be disconnecting from Squid after ~10 seconds. You 
can probably get the Squid "unable to resolve" error page to show up by 
reducing dns_timeout to a value of 5-10 seconds 
(<http://www.squid-cache.org/Doc/config/dns_timeout/>).

Amos