From owner-freebsd-questions Wed Mar 20 7:53:24 2002 Delivered-To: freebsd-questions@freebsd.org Received: from tomts7-srv.bellnexxia.net (tomts7.bellnexxia.net [209.226.175.40]) by hub.freebsd.org (Postfix) with ESMTP id 9C30137B400 for ; Wed, 20 Mar 2002 07:53:17 -0800 (PST) Received: from scaryg.shacknet.nu ([64.231.142.145]) by tomts7-srv.bellnexxia.net (InterMail vM.4.01.03.23 201-229-121-123-20010418) with ESMTP id <20020320155316.OWQS29596.tomts7-srv.bellnexxia.net@scaryg.shacknet.nu>; Wed, 20 Mar 2002 10:53:16 -0500 Received: from localhost ([::1] helo=scaryg.shacknet.nu) by scaryg.shacknet.nu with smtp (Exim 3.34 #1) id 16niP8-00082c-00; Wed, 20 Mar 2002 10:53:34 -0500 Date: Wed, 20 Mar 2002 10:53:33 -0500 From: ScaryG To: Flemming Frøkjkær Cc: freebsd-questions@FreeBSD.ORG Subject: Re: ipfw rules Message-Id: <20020320105333.6376de59.freymann@scaryg.shacknet.nu> In-Reply-To: <3C992774.D763B085@froekjaer.org> References: <3C992774.D763B085@froekjaer.org> X-Mailer: Sylpheed version 0.7.2 (GTK+ 1.2.10; i386-portbld-freebsd4.4) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-MailScanner: Found to be clean Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, 20 Mar 2002 16:21:08 -0800 Flemming Frøkjkær wrote: > I'm trying to build a firewall based on the simple firewall in the > rc.firewall script > after enabling the firewall I can't look up any addresses. If I use > nslookup it just times out :( > I can add a rule like this: ipfw add 9999 pass all from any to any > Then everything works, but the firewall does not do me any good :( > what rules should I add to make DNS work? I think you need to add this one: ${fwcmd} add pass udp from ${ip} to any 53 keep-state gf To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message