Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 13 Aug 1999 17:00:04 -0500
From:      "David B. Aas" <dave@ciminot.com>
To:        "'Oscar Bonilla'" <obonilla@fisicc-ufm.edu>, "'Dan Busarow'" <dan@dpcsys.com>
Cc:        <questions@freebsd.org>
Subject:   RE: FW: Need consulting help with v3.2 firewall
Message-ID:  <003501bee5d7$33351a00$0fc8a8c0@dave.ciminot.com>
In-Reply-To: <19990811190623.C1967@fisicc-ufm.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
Oscar and Dan-

I am set up as a caching DNS server.

Here is my named.boot file:
####################
directory /etc/namedb
primary 0.0.127.in-addr.arpa localhost.rev
forwarders 206.30.26.10 206.30.27.130
#####################

The 2 ips on the forwarders line are the primary and secondary DNS servers
of my ISP.

Here is my localhost.rev file:
####################
;       From: @(#)localhost.rev 5.1 (Berkeley) 6/30/90
;       $Id: PROTO.localhost.rev,v 1.4 1997/05/01 21:02:37 ache Exp $
;
; This file is automatically edited by the `make-localhost' script in
; the /etc/namedb directory.
;

@       IN      SOA     gateway.towncountry.net.
root.gateway.towncountry.net.  (
                                19990803        ; Serial
                                3600    ; Refresh
                                900     ; Retry
                                3600000 ; Expire
                                3600 )  ; Minimum
        IN      NS      gateway.towncountry.net.
1       IN      PTR     localhost.towncountry.net.
#######################
Domain Names have been changed to protect the innocent.

I set it up as detailed in "The Complete FreeBSD". Am I missing something?

Dave Aas
dave@ciminot.com

> -----Original Message-----
> From: Oscar Bonilla [mailto:obonilla@fisicc-ufm.edu]
> Sent: Wednesday, August 11, 1999 8:06 PM
> To: Dan Busarow
> Cc: David B. Aas; questions@FreeBSD.ORG
> Subject: Re: FW: Need consulting help with v3.2 firewall
>
>
> On Wed, Aug 11, 1999 at 04:27:23PM -0700, Dan Busarow wrote:
> > On Wed, 11 Aug 1999, David B. Aas wrote:
> > > I cleaned up my rules, and set up the logging. That
> helped lots. My rules
> > > had some problems with UDP from the internal net. I fixed those.
> > >
> > > I set up a rule to allow all from any to any and ran my
> POP3 client on my
> > > network workstations. It still does not work. I am
> thinking that it is
> > > something to do with my DNS.
> > >
> > > My console still gives me an error message "servername
> > > popper[number]:(v2.53) unable to get canonical name of
> client, err=0"
> > >
> > > Should I post my DNS settings? I have checked them over
> several times, and
> > > don't see anything wrong. I had it set for a secondary
> DNS server, and I
> > > changed it to a caching DNS server as a troubleshooting
> technique. I am
> > > following the discussion in "The Complete FreeBSD".
> > >
> > > Am I missing something?
> >
> > You need to provide DNS, at least in-addr.arpa, for your internal
> > hosts.
> >
>
> definitely. You should provide forward DNS as well, at least for the
> internal network.
>
> regards,
>
> -Oscar



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?003501bee5d7$33351a00$0fc8a8c0>