> In my attempt to configure a transparent squid using PF, ( squid is > running on the > openbsd gateway ) I have found out that the client is trying to > connect to the > internet using the DNS server configured in the client, which does not > work, because > the DNS server specified in the client is only internal.
Because the client doesn't know it should use a proxy, it does a DNS resolve attempt. So either allow DNS resolving, or force a proxy in the browser. See an earlier mail from Mark Elsen for more downsides of interception proxying. Joost
