Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 20 May 2005 09:50:32 -0400
From:      Chuck Swiger <cswiger@mac.com>
To:        Stephane Raimbault <stephane@enertiasoft.com>
Cc:        freebsd-ipfw@freebsd.org
Subject:   Re: named error sending response: permision denied
Message-ID:  <428DEB28.5030505@mac.com>
In-Reply-To: <5D5EFEE7-F123-43CB-A40E-7FF7EAF03C07@enertiasoft.com>
References:  <39F3A41D-9555-452F-8B41-3EA03E1AC460@enertiasoft.com> <1116435784.34699.23.camel@jose> <DBDEAE42-4CD3-4989-AEB8-CF4794942240@enertiasoft.com> <5D5EFEE7-F123-43CB-A40E-7FF7EAF03C07@enertiasoft.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Stephane Raimbault wrote:
> Does anyone have any further thoughts on this, or could maybe point  me 
> in a direction that could help me solve the problem?

Take a look at "ipfw -a l", and see which rules are being matched.  The output 
from that command is critical for understanding what the firewall is actually 
doing, and should help you figure out what is going on. [1]

Do these make your DNS work better:

ipfw add 1 pass udp from any to any 53
ipfw add pass udp from any 53 to any

...?

These rules are too open, and should just be used for testing, but you can see 
if the problem is with the firewall rules you have now, and adjust things from 
there.

-- 
-Chuck

[1]: It would also help *us* figure out what the issue is.  If you still need 
help after this, providing more info would be useful.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?428DEB28.5030505>