On 12/06/2014 5:05 a.m., Mark jensen wrote:
> 
> 
> Hello 
> 
> we all know that access.log file logs the access Info of Squid, something 
> like that:
> 125213512.746 41762 192.168.1.17 .............. 
> 125213513.746 47616 192.168.1.18 ..............
> 
> 
> MY local DNS server has records like this ( in its revers zone 
> (1.168.192.in-addr.arpa)):
> 
> $TTL 60 ; 1 minute 
> 17            PTR Mark
> 18            PTR Mike
> 
> I have managed to make this record in the access.log file (using the option 
> "log_fqdn on" and by changing the log format):
> 
> 125213512.746 41762 192.168.1.17 .............. 
> 
> to be something like that:
> 
> 125213512.746 41762 192.168.1.17 Mark .............. 
> 
> the problem is that the DNS records keep changing ( something like that ):
> 
> $TTL 60 ; 1 minute 
> 17            PTR Karl
> 18            PTR Mike
> 
> and
> 
> $TTL 60 ; 1 minute 
> 17            PTR Paul
> 18            PTR Mike
> 
> and so on ......
> 
> but the squid keep resolving the IP as "Mark", so I guess that Squid use the 
> cached look up so what ever "Mark" change in DNS zone it keeps it "Mark"
> 
> My questions are:
> 
> 1) what is the option who makes Squid cache looks up ?

The "$TTL 60 ; 1 minute" in the DNS server configuration tells Squid and
a other software looking up the DNS that the record delivered is to be
cached for 60 seconds.

> 2) how to stop this option and make Squid keeps ask the DNS and ignore the 
> cache looks up?

Configure DNS correctly to match the update frequency for the zone. If
that is real-time then the zone TTL needs to be close to 0 and you will
need to lower http://www.squid-cache.org/Doc/config/negative_dns_ttl/
appropriately to match the supeer-low TTL.


Note that it is BAD practice to change a zone file entry more often than
*daily*. Reseting PTR records every 1 minute or less will screw up in a
great many systems, Squid is just one.

Amos

Reply via email to