From owner-freebsd-security@FreeBSD.ORG Fri Jan 23 01:47:02 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1305116A4CE for ; Fri, 23 Jan 2004 01:47:01 -0800 (PST) Received: from mx1.webspacesolutions.com (ns1.webspacesolutions.com [216.74.11.68]) by mx1.FreeBSD.org (Postfix) with SMTP id 8E11843D49 for ; Fri, 23 Jan 2004 01:46:57 -0800 (PST) (envelope-from nick@webspacesolutions.com) Received: (qmail 10246 invoked by uid 507); 23 Jan 2004 09:31:58 -0000 Received: from nick@webspacesolutions.com by ns1.webspacesolutions.com by uid 504 with qmail-scanner-1.20rc1 (clamuko: 0.65. spamassassin: 2.55. Clear:RC:1:. Processed in 0.057927 secs); 23 Jan 2004 09:31:58 -0000 Received: from 24-205-247-185.ata-cres.charterpipeline.net (HELO beastie) (24.205.247.185) by mx1.webspacesolutions.com with SMTP; 23 Jan 2004 09:31:58 -0000 From: "Nick Twaddell" To: Date: Fri, 23 Jan 2004 01:47:23 -0800 Organization: Web Space Solutions MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.5510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Thread-Index: AcPhldpM1M2B1ZVJRaawiT3Zr5pRhA== X-Qmail-Scanner-Message-ID: <107485031863610241@ns1.webspacesolutions.com> Message-Id: <20040123094657.8E11843D49@mx1.FreeBSD.org> Subject: ipfw + named problem X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Jan 2004 09:47:02 -0000 Ok, I am really stumped on this one. I setup ipfw with all my rules. Everything works great except for dns. If I do nslookup I get -su-2.05b# nslookup yahoo.com Server: localhost.webspacesolutions.com Address: 127.0.0.1 *** localhost.webspacesolutions.com can't find yahoo.com: Non-existent host/domain This is what I have in my ipfw.rules add 00310 allow tcp from any to any 53 out via de0 setup keep-state add 00311 allow udp from any to any 53 out via de0 keep-state What am I missing?? Thanks Nick