<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Ty. I checked the following <a href="https://www.squid-cache.org/Doc/config/netdb_filename/" class="">https://www.squid-cache.org/Doc/config/netdb_filename/</a>, and asked google.<div class=""><br class=""></div><div class="">“</div><div class=""># {cache_peer …. no_netdb_exchange } already set earlier</div><div class="">netdb_filename <span class="Apple-tab-span" style="white-space:pre"> </span>none</div><div class="">pinger_enable<span class="Apple-tab-span" style="white-space:pre"> </span>off<span class="Apple-tab-span" style="white-space:pre"> </span></div><div class="">Icp_port<span class="Apple-tab-span" style="white-space:pre"> </span>0 <span class="Apple-tab-span" style="white-space:pre"> </span>#seems to be default value</div><div class="">“</div><div class="">And this issue persists. It seems that NO squid.conf could help with the DNS leak issue. </div><div class="">Q1: So, does Squid netdb work on the IP level? In that way, squid has <span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class="">unclear ACLs that bring up invisible </span>communications.</div><div class=""><br class=""></div><div class="">Q2: Do I have to compile squid from the source code without benefit of automatic community upgrade ? This is really a less preferable option for most users.</div><div class="">Is there a higher version of squid that comes up with a powerful conf ?</div><div class=""><br class=""></div><div class=""><blockquote type="cite" class=""><blockquote type="cite" class=""><blockquote type="cite" class=""><br class="">FWIW, if I have access to a full debugging log collected while reproducing the problem, I may be able to tell you what causes DNS lookups in your specific environment. I discourage Squid admins from studying debugging logs because they are meant for Squid developers and can be very misleading.</blockquote></blockquote></blockquote><br class=""></div><div class="">We can only confirm issues and observe callees from logs. </div></body></html>