Date: Fri, 13 Aug 1999 17:00:04 -0500 From: "David B. Aas" <dave@ciminot.com> To: "'Oscar Bonilla'" <obonilla@fisicc-ufm.edu>, "'Dan Busarow'" <dan@dpcsys.com> Cc: <questions@freebsd.org> Subject: RE: FW: Need consulting help with v3.2 firewall Message-ID: <003501bee5d7$33351a00$0fc8a8c0@dave.ciminot.com> In-Reply-To: <19990811190623.C1967@fisicc-ufm.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Oscar and Dan-
I am set up as a caching DNS server.
Here is my named.boot file:
####################
directory /etc/namedb
primary 0.0.127.in-addr.arpa localhost.rev
forwarders 206.30.26.10 206.30.27.130
#####################
The 2 ips on the forwarders line are the primary and secondary DNS servers
of my ISP.
Here is my localhost.rev file:
####################
; From: @(#)localhost.rev 5.1 (Berkeley) 6/30/90
; $Id: PROTO.localhost.rev,v 1.4 1997/05/01 21:02:37 ache Exp $
;
; This file is automatically edited by the `make-localhost' script in
; the /etc/namedb directory.
;
@ IN SOA gateway.towncountry.net.
root.gateway.towncountry.net. (
19990803 ; Serial
3600 ; Refresh
900 ; Retry
3600000 ; Expire
3600 ) ; Minimum
IN NS gateway.towncountry.net.
1 IN PTR localhost.towncountry.net.
#######################
Domain Names have been changed to protect the innocent.
I set it up as detailed in "The Complete FreeBSD". Am I missing something?
Dave Aas
dave@ciminot.com
> -----Original Message-----
> From: Oscar Bonilla [mailto:obonilla@fisicc-ufm.edu]
> Sent: Wednesday, August 11, 1999 8:06 PM
> To: Dan Busarow
> Cc: David B. Aas; questions@FreeBSD.ORG
> Subject: Re: FW: Need consulting help with v3.2 firewall
>
>
> On Wed, Aug 11, 1999 at 04:27:23PM -0700, Dan Busarow wrote:
> > On Wed, 11 Aug 1999, David B. Aas wrote:
> > > I cleaned up my rules, and set up the logging. That
> helped lots. My rules
> > > had some problems with UDP from the internal net. I fixed those.
> > >
> > > I set up a rule to allow all from any to any and ran my
> POP3 client on my
> > > network workstations. It still does not work. I am
> thinking that it is
> > > something to do with my DNS.
> > >
> > > My console still gives me an error message "servername
> > > popper[number]:(v2.53) unable to get canonical name of
> client, err=0"
> > >
> > > Should I post my DNS settings? I have checked them over
> several times, and
> > > don't see anything wrong. I had it set for a secondary
> DNS server, and I
> > > changed it to a caching DNS server as a troubleshooting
> technique. I am
> > > following the discussion in "The Complete FreeBSD".
> > >
> > > Am I missing something?
> >
> > You need to provide DNS, at least in-addr.arpa, for your internal
> > hosts.
> >
>
> definitely. You should provide forward DNS as well, at least for the
> internal network.
>
> regards,
>
> -Oscar
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?003501bee5d7$33351a00$0fc8a8c0>
