Date: Thu, 26 May 2005 16:42:06 -0500 From: "Edwin L. Culp" <eculp@encontacto.net> To: pf@freebsd.org Subject: Re: problem with dns on all and squid on some. Message-ID: <20050526164206.8s06d5veg44gkocg@mail.encontacto.net> In-Reply-To: <8eea040805052614177ca5e3d9@mail.gmail.com> References: <20050526161315.4997ejvpxwswowsc@mail.encontacto.net> <8eea040805052614177ca5e3d9@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Quoting Jon Simola <jsimola@gmail.com>:
> On 5/26/05, Edwin L. Culp <eculp@encontacto.net> wrote:
>
>> this configuration there is no dns resolution. The first problem.
>
>> tcp_services = "{ 22, 25, 53, 80, 110, 113, 123, 143, 389 }"
>
>> block all
>> pass in on $ext_if inet proto tcp from any to ($ext_if) port
>> $tcp_services flags S/SA keep state
>
> DNS is UDP port 53, which you've blocked.
Thanks, Jon, I thought it would work with either but I added a udp line
before the tcp line.
pass in on $ext_if inet proto udp from any to ($ext_if) port 53 keep state
pass in on $ext_if inet proto tcp from any to ($ext_if) port
$tcp_services flags S/SA keep state
and it works. Hmmmm......, I wonder if there is something else that I
need to add to udp?
Thanks,
ed
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050526164206.8s06d5veg44gkocg>