[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How do I configure iptables to allow DNS lookups?

Jeremy Gaddis wrote:

On Wed, 2003-08-06 at 22:02, Malcolm Ferguson wrote:
I have /etc/resolv.conf containing a nameserver entry. I also have some name servers listed in the forwarders section of etc/bind/named.conf. Is there a way to configure both bind and the normal name resolver (how does it work???) to always use the same port?

From /etc/bind/named.conf (Debian box):

 // If there is a firewall between you and nameservers you want
 // to talk to, you might need to uncomment the query-source
 // directive below.  Previous versions of BIND always asked
 // questions using port 53, but BIND 8.1 and later use an unprivileged
 // port by default.

 query-source address * port 53;

Hah: thanks! That was right under my nose. I guess I've been ignoring that section for a while now as I haven't tried this before. I should probably point resolv.conf at the local server too.


Reply to: