Date: Thu, 26 May 2005 16:44:14 -0500 From: "Edwin L. Culp" <eculp@encontacto.net> To: pf@freebsd.org Subject: Re: problem with dns on all and squid on some. Message-ID: <20050526164414.l1s0t1u4fksoc48c@mail.encontacto.net> In-Reply-To: <20050526212026.GG794@zaphod.nitro.dk> References: <20050526161315.4997ejvpxwswowsc@mail.encontacto.net> <8eea040805052614177ca5e3d9@mail.gmail.com> <20050526212026.GG794@zaphod.nitro.dk>
next in thread | previous in thread | raw e-mail | index | archive | help
Quoting "Simon L. Nielsen" <simon@FreeBSD.org>:
> On 2005.05.26 14:17:32 -0700, Jon Simola wrote:
>> On 5/26/05, Edwin L. Culp <eculp@encontacto.net> wrote:
>>
>> > this configuration there is no dns resolution. The first problem.
>>
>> > tcp_services = "{ 22, 25, 53, 80, 110, 113, 123, 143, 389 }"
>>
>> > block all
>> > pass in on $ext_if inet proto tcp from any to ($ext_if) port
>> > $tcp_services flags S/SA keep state
>>
>> DNS is UDP port 53, which you've blocked.
>
> Well, more accurately... it's TCP and UDP, both port 53, though it
> uses UDP most of the time.
Thanks, Simon. I thought it would use TCP but I guess not because
adding udp to port 53 seems to have fixed it.
Thanks again to you both,
ed
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050526164414.l1s0t1u4fksoc48c>