Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 1 subscriber
  • Views 4455 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTP Proxy and DNS

burtoncarl
I've recently upgraded from 7.011 to 7.104
I use the HTTP Proxy(transparent) and the Content filter
After upgrading it doesn't appear that the http proxy is able to get DNS resolution.
When I turn off the proxy the requests go through fine.  When it is on though I receive an error page saying: 

While trying to retrieve the URL: 	http://google.com/

Error message: 	DNS resolution timeout

Your cache administrator is: 


ANY help will be appreciated!

Here is a copy of the LiveLog for the  

2008:05:12-13:11:29 (none) httpproxy[9474]: Integrated HTTP-Proxy (c) 2007 Astaro AG

2008:05:12-13:11:29 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="read_config" file="httpproxy.c" line="429" message="loading httpproxy.ini"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs01.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs02.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs03.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs04.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs05.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs06.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs07.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs08.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scr_reload" file="scr_scanner.c" line="331" message="called"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs01.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs02.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs03.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs04.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs05.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs06.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs07.astaro.com: Temporary failure in name resolution"

2008:05:12-13:11:33 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs08.astaro.com: Temporary failure in name resolution"

2008:05:12-13:12:01 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs01.astaro.com: Temporary failure in name resolution"

2008:05:12-13:12:01 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs02.astaro.com: Temporary failure in name resolution"

2008:05:12-13:12:02 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs03.astaro.com: Temporary failure in name resolution"

2008:05:12-13:12:02 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs04.astaro.com: Temporary failure in name resolution"

2008:05:12-13:12:02 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_resolve_server" file="scr_scanner.c" line="390" message="DNS: cffs05.astaro.com: Temporary failure in name resolution"

2008:05:12-13:12:02 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x81e7c18" function="sc_categorize_url" file="scr_scanner.c" line="932" message="no categorization received for url: http://google.com/"

2008:05:12-13:12:09 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x81e7c18" function="dns_expire" file="dns.c" line="761" message="dns query timed out, retransmitting (retry 1)"

2008:05:12-13:12:14 (none) httpproxy[9474]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x81e7c18" function="dns_expire" file="dns.c" line="761" message="dns query timed out, retransmitting (retry 2)"

2008:05:12-13:12:19 (none) httpproxy[9474]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request could not be delivered due to an error" action="block" method="GET" srcip="172.16.1.50" user="" statuscode="500" cached="0" profile="profile_1" filteraction="action_REF_DefaultHTTPCFFAction" size="2119" time="17998 ms" request="0x81e7c18" url="google.com/" error="DNS resolution timeout" category="1720" categoryname="Categorization Failed" 


This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to burtoncarl
    Also...

    Do you have any DNS request routes?

    And are you using DHCP?
        * If so what DNS IP's are you handing out to the clients on your network
        * If not.. what are your machines setup to use statically?
Children
  • 0 in reply to kury
    Do you have any DNS request routes?

    Nope, never have.

    And are you using DHCP?

    No, all static.
    I have four subnets.
    172.16.1.0/24 NIC1
    172.16.2.0/24 NIC2
    172.16.3.0/24 NIC2
    172.16.4.0/24 NIC2

      The first question makes me wonder if wonder if I've ever had this set up correctly.  I'm fairly new to the intricacies of networking.  I've got most my machines set up with the recursive DNS(gateway) as the primary DNS resolver, and also with the ISP DNS providers as the second and third.  Reason for that is that it seemed that the recursive DNS worked in most cases, but not all.  I had assumed that the reason for that was that squid wasn't updating the DNS cache frequent enough for sites like MySpace that load balance a lot.
      Also I'd be curious to know why the updates caused this sudden issue.

    Thanks again!
  • 0 in reply to burtoncarl
    Having this same issue, taking a new, fresh install at 7.504 and updating to 7.505 (happens in both versions).  DNS resolution timeouts all the time.  I found this thread, turned off transparency and it works like a charm... little slow, but works.  Also seeing a TON of port 53 (Domain) packets being dropped too, something this wasn't doing with my last computer running Astaro.

    My set up is simple:

    DHCP - 192.168.20.x /24
    DNS is Google DNS (ISP DNS sort of sucks, but I did try that too in the pool settings)
    Default Gateway is the DSL modem

    As I said, fresh installation, upgraded to 7.505, imported backup (also tried before importing the backup - same thing).  Checked all settings, and everything came over as it should.  With transparency checked, almost every page will timeout.  With it unchecked, every page loads immediately (new sites I go to after clearing DNS cache, temp files, etc on computers).

    XG 19.5 GA 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
    16GB Memory | 500GB SSD HDD | GB Ethernet x5