dig problems

[Mark.Andrews at nominum.com]

> Hello!  I can't seem to get dig working..
> 
> I get this error:
> 
> [root at linuxserver david]# dig @a.root-servers.net . ns
> 
> ; <<>> DiG 8.2 <<>> @a.root-servers.net . ns
> ; (1 server found)
> ;; res options: init recurs defnam dnsrch
> ;; res_nsend to server a.root-servers.net  198.41.0.4: Connection refused
> [root at linuxserver david]#
> 
> 
> I suspect my firewall isn't letting dig querys through.  What port does dig
> use?  Any help is appreceated!

	It uses a random port to send an recieve.  You really need a
	stateful firewall if you are wanting UDP based clients (like dig)
	to talk through it.

	If you don't have a stateful firewall allow outbound from any port
	to port 53 and inbound from any port to port 53.  You can replace
	"any" in the this desription with a smaller range if your kernels
	only allocate random ports from a smaller range.

	Mark
> 
> -------------------------
> David Bell - Otherwise known as DB7654321
> 
> Remember to remove nospam, notrash or anything odd looking from my email
> address. :)
> 
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com