-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, Aug 06, 2003 at 11:02:42PM -0400, Malcolm Ferguson wrote:
> I'm trying to configure iptables as strictly as possible, however, I'm 
> having problems with DNS.  If I understand correctly how DNS works, the 
> client sends a UDP packet from a high number port to port 53 on the name 
> server.  The name server responds with a UDP packet back to that high 
> number port.  Is this correct?

Use stateful firewalling, it's easier.  I don't remember how to set it
up, and the machine I set it up on originally is packed up since I
become technically homeless on Saturday (but I do have a place to stay
and put my box up).

- -- 
 .''`.     Paul Johnson <[EMAIL PROTECTED]>
: :'  :    proud Debian admin and user
`. `'`
  `-  Debian - when you have better things to do than fix a system
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/Mjq4sClmdIs2Ki8RAkuTAJ9PobGh4q34md0odpvyl2LlwqyStwCeJBng
bYZfTmdPud9C1M7mnmfw10o=
=F/2J
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to