Personally, I would setup a caching-only instance of BIND on the proxy, and using that for DNS, or using your "internal" DNS system on your network, rather than depending on an outside source for all of your DNS. >>> <childrenofchaos@xxxxxxxxxx> 4/13/2011 3:06 PM >>> Hey, The configuration listet above, runs longer 1 year without an probs. Now we get the Squid Message: Timeout - DNS Error. first step i tried: dig google.de from the squid maschine. No probs. i saw in the cache.log that all url_rewrite_children are busy, so i screwd em up from 8 to 16. Okey one Day later: DNS Error, and at this Time, no prob with the url_rewrite_children. now i added some dns Server and the google dns Server (8.8.8.8) which should be up, and what i recieved today :/ dns Error. After squid restart all works fine, no probles comes up in the logs (in all logs) but after a day, the messaged blow up again. now i added dns_nameserver in the squid.conf but no idea any more? thanks for spending time on this. --- freenetMail - Der zuverlÃssige E-Mail-Dienst von freenet.de Jetzt http://mail.freenet.de/produkte/basic/index.html?pid=10111947018 mit 1 GB Speicher und Profi-Spamschutz sichern! Travel Impressions made the following annotations ------------------------------------------------------------- "This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you."