mån 2009-09-21 klockan 10:49 +0200 skrev Silamael: > > The point i don't understand is, why Squid forwards the request without > any DNS reply but seems to do some timeout handling if NXDOMAIN is replied? Probably you get a retransmission to another DNS server that answers when you block traffic to the one who responds with NXDOMAIN. When Squid gets NXDOMAIN back it starts using the domain search path, which involves additional DNS queries trying to search for the requested host. Regards Henrik
