Re: iptables and domain services...

["Janet Post" <j.post@sparton.ca>]

So you're running a DNS server?

No.  I'm just trying to get name resolution working.

iptables is just trying to resolve the ip numbers in your rules.
"iptables -L -n" will change that.

Yes.  I -finally- figured this out, thanks to Phil and Noah.  Noah was correct that iptables hanging was just a symptom of my problem.  I have to figure out how to get DNS name resolution working.....

If the policy on the INPUT chain is "DROP" or "REJECT" try making this the
first rule in your INPUT chain:

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

You should run

iptables -I INPUT 1 -m state --state ESTABLISHED,RELATED -j ACCEPT

if you don't clear your INPUT chain first.

What would the benefit of these rules be?  I understand that they allow a previously established connection and related connections (like icmp error messages) though, but I am allowing those services anyway?  Nevermind...I just figured it out -- it's so that the return packets to not have to traverse the entire chain again.  (It's been a long day!)


I'm still not clear on this then...What ports do I open to allow my server and the computers behind it resolve ip numbers?  It is obviously NOT port 53 or my rules would work.


Thank you so much for your help,

Janet Post
j.post@sparton.ca