Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 20 Mar 2002 17:46:49 +0100
From:      Walter Hop <walter@binity.com>
To:        Flemming =?iso-8859-1?q?Fr=F8kjk=E6r?= <flemming@froekjaer.org>, freebsd-questions@FreeBSD.ORG
Subject:   Re: ipfw rules
Message-ID:  <200203201744.15491@silver.dt1.binity.net>
In-Reply-To: <3C992774.D763B085@froekjaer.org>
References:  <3C992774.D763B085@froekjaer.org>

next in thread | previous in thread | raw e-mail | index | archive | help
[in reply to Flemming Frøkjkær, Thursday 21 March 2002 01:21]

> I can add a rule like this: ipfw add 9999 pass all from any to any
> Then everything works, but the firewall does not do me any good :(
> what rules should I add to make DNS work?

I have the following rules for DNS:

ipfw add 03300 allow udp from me to 194.109.6.66 53 keep-state via tun0
ipfw add 03301 allow udp from me to 194.109.9.99 53 keep-state via tun0

The IP addresses mentioned are the DNS servers of my provider which I 
query, tun0 is the network device used to reach them. If you want to 
allow traffic to all DNS servers on the internet you can use one rule 
with "...to any 53 keep-state" instead.

-- 
 Walter Hop <walter@binity.com> | +31 6 24290808 | PGP keyid 0x84813998
 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200203201744.15491>