I am trying to modify my access-list so that we allow DNS queries to traverse
the network but no other UDP traffic.

This is what I have coded but it doesn't work:

access-list 105 permit udp any any eq 53
access-list 105 deny udp any any

What we are trying to do is allow our internal DNS servers to query our external
DNS servers if the request is not in local cache.  We put a sniffer on it and
found that the request was going from port 53 to port 53.  This is different
behavior than a client request.

Any help would be greatly appreciated.

Thanks,
Jim Lemieux


-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to