Date: Mon, 27 Jul 1998 12:03:56 -0700 (PDT) From: Jesse <j@lumiere.net> To: Mike <mike@seidata.com> Cc: freebsd-security@FreeBSD.ORG Subject: Re: ipfw rules to allow DNS activity Message-ID: <Pine.BSF.3.96.980727120237.21804A-100000@leaf.lumiere.net> In-Reply-To: <Pine.BSF.4.01.9807270956570.24288-100000@ns1.seidata.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> > hehe). Anyway, I was wondering what are the minimum rules necessary to
> > allow DNS queries/transfers from other servers to my server, and also to
> > allow queries from my server to other servers.
>
> I'm running BIND8, and would suggest that you simply use an
> 'allow-transfer' statement in named.conf if you are doing the same.
> Unless you prefer using ipfw for some reason, setup and maintenance seems
> much simpler and understandable through named.conf.
Hi Mike,
The reason is, because even if I allow that, an ipfw firewall that
denies everything except what is specifically allowed will still prevent
all DNS activity. I think the others covered it pretty well though. And
thanks for the allow-transfer tip, I can probably use that in addition to
the ipfw rules. :)
>
> allow-transfer {
> 10.2.0.1; // ips of servers to allow...
> 10.2.0.3;
> //etc...
> };
>
> -mike
>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980727120237.21804A-100000>