From owner-freebsd-questions Mon Feb 4 14:14:58 2002 Delivered-To: freebsd-questions@freebsd.org Received: from sage-american.com (sage-american.com [216.122.141.44]) by hub.freebsd.org (Postfix) with ESMTP id 0571837B425 for ; Mon, 4 Feb 2002 14:14:53 -0800 (PST) Received: from SAGEONE (adsl-64-219-21-232.dsl.crchtx.swbell.net [64.219.21.232]) by sage-american.com (8.9.3/8.9.3) with SMTP id QAA14418; Mon, 4 Feb 2002 16:14:45 -0600 (CST) Message-Id: <3.0.5.32.20020204161443.01917078@mail.sage-american.com> X-Sender: jacks@mail.sage-american.com X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.5 (32) Date: Mon, 04 Feb 2002 16:14:43 -0600 To: Edwin Groothuis From: jacks@sage-american.com Subject: Re: Firewall Denies - w/info Cc: freebsd-questions@freebsd.org In-Reply-To: <20020205084609.P1599@k7.mavetju.org> References: <3.0.5.32.20020204153106.01917078@mail.sage-american.com> <3.0.5.32.20020204135700.01917078@mail.sage-american.com> <3.0.5.32.20020204135700.01917078@mail.sage-american.com> <20020205075442.O1599@k7.mavetju.org> <3.0.5.32.20020204153106.01917078@mail.sage-american.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG The # I put in for the email. But, you have a point about opening up and I suspect that's the problem. Have changed over to the other rules I just sent and seems to have opned up things okay. The dynamic output from "ipfw show" is pretty busy now.... At 08:46 AM 2.5.2002 +1100, Edwin Groothuis wrote: >On Mon, Feb 04, 2002 at 03:31:06PM -0600, jacks@sage-american.com wrote: >> hmmmm.... thought I had the dns udps covered with these DNS-specific rules: >> (of course, "odnsx" = outside nameserver) >> # DNS - Allow queries out in the world >> #${fwcmd} add pass udp from any to ${odns1} 53 >> #${fwcmd} add pass udp from any to ${odns2} 53 >> #${fwcmd} add pass udp from ${odns1} 53 to any >> #${fwcmd} add pass udp from ${odns2} 53 to any >> #${fwcmd} add pass udp from any to ${odns3} 53 >> #${fwcmd} add pass udp from any to ${odns4} 53 >> #${fwcmd} add pass udp from ${odns3} 53 to any >> #${fwcmd} add pass udp from ${odns4} 53 to any >> >> Where do you see the missing rule that is blocking the udps..??? > >I see a lot of #'s, which are comments. > >Furthermore, you need to give access to *all* DNS servers in the >world, unless you are using the forward statement to your ISP. In >that case, you also don't need the root.hints statement in your >named.conf. > >Edwin > >-- >Edwin Groothuis | Personal website: http://www.MavEtJu.org >edwin@mavetju.org | Interested in MUDs? Visit Fatal Dimensions: >------------------+ http://www.FatalDimensions.org/ > > Best regards, Jack L. Stone, Server Admin =================================================== Sage-American http://www.sage-american.com jacks@sage-american.com "My center is giving way, my right is in retreat; ....situation excellent! ....I shall attack!" =================================================== To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message