Re: DNS and firewall problem

2001-01-01 Thread Charles Galpin
Hi Mikkel I tried a number of things but still couldn't get it to work. It works fine if I use port 53 on the internal server, but I'm already using that for an internal DNS server. I am not denying ports above 1024 in my current ruleset. I tried adding the rules below (but inserted them at the

Re: DNS and firewall problem

2000-12-31 Thread Mikkel L. Ellertson
On Sun, 31 Dec 2000, Charles Galpin wrote: > Hi Mikkel > > On Sun, 31 Dec 2000, Mikkel L. Ellertson wrote: > > What does your firewall rules for port 53 look like, > > Ok, this is (effectively) what my firewall does (i cut out the chaff) > > $IPCHAINS -I input 1 -i $LOCALIF -y -p TCP --destin

Re: DNS and firewall problem

2000-12-31 Thread Charles Galpin
Hi Mikkel On Sun, 31 Dec 2000, Mikkel L. Ellertson wrote: > What does your firewall rules for port 53 look like, Ok, this is (effectively) what my firewall does (i cut out the chaff) $IPCHAINS -I input 1 -i $LOCALIF -y -p TCP --destination-port 53 -j ACCEPT $IPCHAINS -I input 1 -i $LOCALIF

Re: DNS and firewall problem

2000-12-31 Thread Mikkel L. Ellertson
On Sun, 31 Dec 2000, Charles Galpin wrote: > Hi all > > I have setup a DNS server behind a linux firewall box doing NAT and port > forwarding port 53 to the internal server. > > When testing it with nslookup, all the domains/IPs it is responsible for > work fine (forward and reverse), however i