Squid / DNS problem

[160473]

Senario:

Windows 2000 server:
DNS-server for local network - forwards internet requests to linux DNS server.
AD-server.

Linux server:
DNS-server (BIND9) for internet addresses.
Squid proxy server.

The problem is that I want to be able to set up Squid ACL:s based upon clinet FQDN but the squid server does not know about the internal DNS names. Is it possible to set up BIND to forward DNS lookups for the internal machine names to the Windows 2000 DNS server and still get names from the internet. To put all client machine names in the BIND configuration is not an option because we are using dynamic IP:s from DHCP. Is it possible to configure Squid to use several DNS servers?
Jan-Eric / Finland

 

[fluid11]

Your Win2K DNS server has a private IP address, such as 192.168.1.1 and your Linux BIND server has a public IP address such as 12.23.45.56, is this correct? As long as your Linux DNS server has a route to your Win2K box, you can do this using the forwarders directive in the /etc/named.conf file...

options {
directory "/var/named";
forwarders { 192.168.1.1; };

This will forward any requests that your Linux box can't resolve to your internal Win2K server.

Another option is to make your Linux server a secondary name server for your internal domain.

ChrisP