Ipchains - Bind - Resolution Inconsistencies

J Laub laubj at lakesoft.net
Thu Oct 2 15:58:10 UTC 2003


Hello,

We are are experiencing an odd problem with the use of ipchains and 
bind.  When the firewall is active, several name servers are totally 
unable to resolve any names on our dns.  When the firewall is stopped 
all dns is resolved with incident.  Am I doing something wrong?  Does 
bind use any other odd ports?

This should accept from external to fw:??

ipchains -A input -i eth1 -s ! 10.0.0.x 1024:65535 -d 199.86.44.xxx 53 
-p udp -j ACCEPT

ipchains -A output -i eth1 -s 199.86.44.xxx 53 -d ! 10.0.0.x 1024:65535 
-p udp -j ACCEPT

ipchains-1.3.10
bind-8.2.3-5

Regards,

-=Jon



More information about the bind-users mailing list