Firewall DNS

[Michael Voight]

Open the firewall for outgoing UDP 53 for the servers you want to allow
to  get to the outside nameservers. You can open it for as many servers
on the inside that you want to be able to go outside. Even with a
forwarder, the forwarder still needs to get though the firewall. So, you
have to have a least one server going through the firewall, unless your
firewall does DNS

Michael

"Brookhouse, Edward (CRTRES)" wrote:
> 
> What is the standard method of setting up DNS behind a firewall? If my
> nameserver can not reach the root servers, it will hang....
> 
> I have read where you can set up a forwarding directive that will send
> requests to another nameserver that CAN reach the root servers.. It this the
> only way ?
> 
> Thanks
> 
> Edward B
> **********************************************************************
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
> 
> This footnote also confirms that this email message has been swept by
> MIMEsweeper for the presence of computer viruses.
> 
> http://www.concert.com
> **********************************************************************