From owner-freebsd-security  Thu Feb 22 10:57:24 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mail.wlcg.com (mail.wlcg.com [207.226.17.4])
	by hub.freebsd.org (Postfix) with ESMTP id 3A67337B4EC
	for <freebsd-security@FreeBSD.ORG>; Thu, 22 Feb 2001 10:57:19 -0800 (PST)
	(envelope-from rsimmons@wlcg.com)
Received: from localhost (rsimmons@localhost)
	by mail.wlcg.com (8.11.2/8.11.2) with ESMTP id f1MIvG088922;
	Thu, 22 Feb 2001 13:57:20 -0500 (EST)
	(envelope-from rsimmons@wlcg.com)
Date: Thu, 22 Feb 2001 13:57:16 -0500 (EST)
From: Rob Simmons <rsimmons@wlcg.com>
To: "H. Wade Minter" <minter@lunenburg.org>
Cc: <freebsd-security@FreeBSD.ORG>
Subject: Re: Best way for one-way DNS traffic
In-Reply-To: <Pine.BSF.4.33.0102212230430.57938-100000@ashburn.skiltech.com>
Message-ID: <Pine.BSF.4.33.0102221356340.88455-100000@mail.wlcg.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

man 5 named.conf

look in the options section.

Robert Simmons
Systems Administrator
http://www.wlcg.com/

On Thu, 22 Feb 2001, H. Wade Minter wrote:

> My gateway box is running a name server for my home network.  Internal
> clients point to the gateway box for DNS service, and the gateway goes out
> and resolves DNS queries.
>
> I've also got an ipfw firewall on the gateway.  What I'd like to do is
> make it so internal DNS works like it should, but nobody on the outside
> should be able to connect to port 53.sadm@unired.net.pe
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message