Garl Grigsby wrote:

>  I am trying to setup a squid proxy server for a small number of users. 
> This part working fine. The problem is when the users try to hit servers 
> inside our network. Our network consists of machines that belong to 8+ 
> domain names (multiple buyouts and mergers) and most links on most 
> servers do not contain domain names (e.g. http://server/thispage.html ). 
> Now this is not a big deal most of the time as we just put multiple 
> domain names in the DNS search order. The problem comes in when using 
> Squid. Squid seems to ignore the search string in resolv.conf and only 
> looks at the domain listing. Squid also allows you to specify a domain 
> name to append to all hostnames without a dot in them, but only one. How 
> can I set squid up to search multiple domains?

It looks like you're using squid in non-transparent mode and setting
up all your browsers with manual proxy configuration pointing at the
squid server.  I have squid running on my firewall, and it's
configured to transparently interpose itself.  Each browser does its
own DNS resolution, and if the HTTP connection goes through the
firewall, squid caches the result.  If not, squid never sees it.  This
is exactly what you want if you're trying to save bandwidth.

Another way to do it is to use a proxy autoconfig (.pac) file.  Each
browser loads the .pac file and uses it to decide whether to pass each
HTTP request to a proxy.  I use a .pac file that either connects
directly or uses one of two proxy servers (one is behind TiVo's
firewall, and the other is privoxy, the ad stripping proxy) based on
multiple DNS tests.  Since the .pac file is javascript, you can make
the routing algorithm arbitrarily complex.

        http://www.google.com/search?q=proxy+autoconfig

But I don't know how to configure squid itself to do what you want.

-- 
Bob Miller                              K<bob>
kbobsoft software consulting
http://kbobsoft.com                     [EMAIL PROTECTED]
_______________________________________________
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug

Reply via email to