proxy problems when changing domain names

bristi · 06-05-2007, 04:16 PM

Hi

A student hostel has chosen the name damn.dk (this name and public ip's are fictional) as domain name on the internal network. As a result the home page damn.dk can only be read internally. Now we want to use a web hotel instead to host the page.

This means the dns settings have to be changed. Note the residents must go through a proxy, which is now named proxy.damn.dk. Proxy and dns service resides on same server.

I thought I solved it in this thread (linuxquestions), but the residents are apparently still stopped by the proxy - or at least thats where I think the problem lies now.

The residents must go through a proxy to access the internet. As it is now (after I changed dns settings), the residents can access other sites and the internal web page (using http://damn.dk). If they try to access www.damn.dk they are told to properly set up their proxy.

Most of them use a script that is placed on the dns/proxy/web-server, called proxy.pac:

Code:

function FindProxyForURL(url, host)
       {
           if (isPlainHostName(host) || dnsDomainIs(host, ".damn.dk"))
                 return "DIRECT";
           else
                return "PROXY proxy:3128; DIRECT";
        }

.. which I think may be responsible, but I only guess what it might be doing..

This is what I find which may be interesting in squid.conf:

Code:

$ grep -i damn /etc/squid/squid.conf
acl damn src 172.16.0.0/255.255.0.0
http_access allow damn
visible_hostname proxy.damn.dk

The servers seem to know about the right ip of the new site:

Code:

$ nslookup www.damn.dk
Server:         172.16.0.90
Address:        172.16.0.90#53

Name:   www.damn.dk
Address: 195.41.111.21

And retains knowledge of the domain ip:

Code:

$ nslookup damn.dk
Server:         172.16.0.90
Address:        172.16.0.90#53

Name:   damn.dk
Address: 172.16.0.90

From inside the student hostel this is what a student reported to me, though (from a winbox):

Code:

nslookup www.damn.dk
*** Can't find server name for address 172.16.0.90: Non-existent domain
*** Default servers are not available
Server:  UnKnown
Address:  172.16.0.90

Name:    www.damn.dk
Address:  195.41.111.21

nslookup damn.dk
*** Can't find server name for address 172.16.0.90: Non-existent domain
*** Default servers are not available
Server:  UnKnown
Address:  172.16.0.90

Name:    damn.dk
Address:  195.41.111.21

.. So from his computer both names have same (public) ip and complains about server name.

Any ideas?