Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 7 Jan 2005 10:23:16 -0700
From:      "V Foulk" <kaosent@kewd.com>
To:        <freebsd-questions@freebsd.org>
Subject:   IPFW and whois lookup
Message-ID:  <000401c4f4dd$953bcad0$68bbbbc0@kewdaeahnhd04i>

next in thread | raw e-mail | index | archive | help
Hello,

	I have recently setup IPFW on a test box, and
found that (for the most part) it was pretty straight
forward.  Every rule and service on the box seems to work
great, except for one problem I haven't been able to track
down.  Regardless of the settings, even when set to open as
default with only the allow all from any to any rule, whois and
hostname lookups fail.

	This problem prevented clamav from updating, and a whole 
slew of other minor issues that pop up in the logs.  I was hoping
someone may be able to point out something that I may have missed?

When IPFW is enabled:
When the service uses the local NS, a manual whois gives:
whois: connect(): No route to host

When the service uses the upstream NS, a manual whois gives:
whois: com.whois-servers.net: hostname nor servname provided, or not known

(NS as set in resolv.conf)

The only way I can make the error 'go away' is to disable ipfw in rc.conf
and reboot.

I am certain that this is just a silly oversight on my part.
The machine is running FreeBSD 5.2.1-RELEASE-p13, please let me know if
there
is any other information I can provide that will be useful. Thank you very
much,
in advance, for the help.

VF



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000401c4f4dd$953bcad0$68bbbbc0>