Linux Firewall Server (Proxy)

ddzc · 05-14-2007, 01:52 PM

Hello all,

I have a proxy server set up here with a firewall. Traffic from this proxy is functioning fine except for 1 specific website (internal). It was working fine and out of no where, it stopped functioning from the proxy server. If I use another proxy server, I can access it fine and both proxies look at the same dns server for resolution.

When I try to access the site via IE, it gives me the following error message from the proy server.

Unable to determine ip address from host name for example.com.

The dnsserver returned

Name error: The domain name does not exist.

The dns server entries are fine b/c it works fine from the other proxy.

Is there any way I can configure this server for name resolution on this specific address? This server is not on the lan or dmz, it's external.

Any help would be appreciated, thanks.

win32sux · 05-14-2007, 02:03 PM

are you sure that the working proxy doesn't have an entry for the site in its /etc/hosts file??

ddzc · 05-14-2007, 02:28 PM

no it doesen't.

I also tried editing the /etc/hosts file on the proxy server that is not working. I put the entry for the website that is not working but no luck. When I ping from the proxy server, it's attempting to find the I.P address from a public address so it will never find the system.

win32sux · 05-14-2007, 03:52 PM

Quote:

Originally Posted by ddzc

I also tried editing the /etc/hosts file on the proxy server that is not working. I put the entry for the website that is not working but no luck. When I ping from the proxy server, it's attempting to find the I.P address from a public address so it will never find the system.

that's weird, /etc/hosts should get checked first, like:

Code:

root@candystore:~# ping -c1 linuxquestions.org
PING linuxquestions.org (64.179.4.146) 56(84) bytes of data.
64 bytes from web2.linuxquestions.org (64.179.4.146): icmp_seq=1 ttl=53 time=79.6 ms

--- linuxquestions.org ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 79.684/79.684/79.684/0.000 ms
root@candystore:~# echo "192.168.123.123  linuxquestions.org" >> /etc/hosts
root@candystore:~# ping -c1 linuxquestions.org
PING linuxquestions.org (192.168.123.123) 56(84) bytes of data.

--- linuxquestions.org ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms

i'm not really sure why your box wouldn't behave like above... =/

Quote:

Originally Posted by ddzc

If I use another proxy server, I can access it fine and both proxies look at the same dns server for resolution.

wait, is the working proxy on a separate network location or is it a drop-in replacement you did with the same IP and everything as the non-working one??

win32sux · 05-14-2007, 03:54 PM

Moved: This thread is more suitable in Linux - Networking and has been moved accordingly to help your thread/question get the exposure it deserves.