Date: Thu, 26 May 2005 23:20:27 +0200 From: "Simon L. Nielsen" <simon@FreeBSD.org> To: jon@abccomm.com Cc: pf@freebsd.org Subject: Re: problem with dns on all and squid on some. Message-ID: <20050526212026.GG794@zaphod.nitro.dk> In-Reply-To: <8eea040805052614177ca5e3d9@mail.gmail.com> References: <20050526161315.4997ejvpxwswowsc@mail.encontacto.net> <8eea040805052614177ca5e3d9@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--S5HS5MvDw4DmbRmb
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On 2005.05.26 14:17:32 -0700, Jon Simola wrote:
> On 5/26/05, Edwin L. Culp <eculp@encontacto.net> wrote:
>=20
> > this configuration there is no dns resolution. The first problem.
>=20
> > tcp_services =3D "{ 22, 25, 53, 80, 110, 113, 123, 143, 389 }"
>=20
> > block all
> > pass in on $ext_if inet proto tcp from any to ($ext_if) port
> > $tcp_services flags S/SA keep state
>=20
> DNS is UDP port 53, which you've blocked.=20
Well, more accurately... it's TCP and UDP, both port 53, though it
uses UDP most of the time.
--=20
Simon L. Nielsen
--S5HS5MvDw4DmbRmb
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (FreeBSD)
iD8DBQFClj2ah9pcDSc1mlERAklaAKCegV1Jzk66dMFAc7E2CQIew516ZQCdHYfz
YDFjXBt1b1C76kZf07LBk1M=
=aA4Q
-----END PGP SIGNATURE-----
--S5HS5MvDw4DmbRmb--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050526212026.GG794>