From owner-freebsd-questions@FreeBSD.ORG  Tue Jan 25 19:29:32 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id CCD7516A4CE
	for <freebsd-questions@freebsd.org>;
	Tue, 25 Jan 2005 19:29:32 +0000 (GMT)
Received: from fw.farid-hajji.net (fw.farid-hajji.net [213.146.115.42])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C3A5843D1F
	for <freebsd-questions@freebsd.org>;
	Tue, 25 Jan 2005 19:29:31 +0000 (GMT)
	(envelope-from cpghost@cordula.ws)
Received: from bsdbox.farid-hajji.net (bsdbox [192.168.254.3])
	by fw.farid-hajji.net (Postfix) with ESMTP id C0DC54AD3A;
	Tue, 25 Jan 2005 20:24:43 +0100 (CET)
Date: Tue, 25 Jan 2005 20:30:45 +0100
From: cpghost@cordula.ws
To: Zaid Dashti <zaid@ben-dashti.com>
Message-ID: <20050125193045.GA2244@bsdbox.farid-hajji.net>
References: <000301c50233$cdcd5220$0801a8c0@zaid>
	<20050125180606.GB38051@osiris.chen.org.nz>
	<000c01c5030b$540478f0$0801a8c0@zaid>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <000c01c5030b$540478f0$0801a8c0@zaid>
User-Agent: Mutt/1.5.6i
cc: freebsd-questions@freebsd.org
cc: Jonathan Chen <jonc@chen.org.nz>
Subject: Re: DNS
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Jan 2005 19:29:33 -0000

On Tue, Jan 25, 2005 at 09:25:54PM +0300, Zaid Dashti wrote:
> my firewall rules is only 2 rules :
> add 00001 allow ip from any to any
> add 00002 allow tcp from any to any

What about udp? DNS sends and receives UDP datagrams,
so you need to punch yet another hole in your firewall.

> i didn't  add rules yet, cuz i want to test the machine, after solving this 
> problem i will set the rules

Cheers,
-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/