Search squid archive

Re: squid hardening - weird behaviour

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, Oct 13, 2007, devzero@xxxxxx wrote:
> > You can compile with --disable-internal-dns. That builds a fast external 
> > helper that calls gethostbyname() for squid and passes the results back 
> > without blocking other requests.
> 
> fantastic ! i recompiled with that option and afterwards the open port is gone automatically 
> without touching the .conf and now being "replaced" by 5 dnshelper processes. i assume this 
> won`t probably perform as good as before, but that doesn`t matter for me.

Just a few notes:

* its slow compared to internal dns;
* it may use your nsswitch config if you've got a hosts database in something other than
  DNS (people used to stick em in NIS, for example, which I believe is the kind of
  thing the dnshelper stuff is still around for;)
* what again was the reason you absolutely, positively have to use the external helper?
* finally, a DNS resolver like bind will cache just as well as using something like
  nscd with local get*host*() type calls.



adrian

-- 
- Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support -
- $25/pm entry-level bandwidth-capped VPSes available in WA -

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux