hi!
try this rule:
ipchains -A input -p tcp -s 0/0 -d x.x.x.y 53 -b -j ACCEPT
ipchains -A input -p udp -s 0/0 -d x.x.x.y 53 -b -j ACCEPT
this will match packets going in both directions.
hth,
Ronald C. Rivera
Compass Internet
On Tue, 29 May 2001, Rebecca wrote:
>
> hi!
> i have a dns server behind my firewall. what would be the right code
> to allow dns query from and to my dns server ? the code below seems to
> work but is there a shorter one ? :)
>
> ipchins -A input -p tcp -s 0.0.0.0/0 -d x.x.x.y 53 -j ACCEPT
> ipchins -A input -p udp -s 0.0.0.0/0 -d x.x.x.y 53 -j ACCEPT
> ipchains -A input -p tcp -s 0.0.0.0/0 53 -d x.x.x.y -j ACCEPT
> ipchains -A input -p udp -s 0.0.0.0/0 53 -d x.x.x.y -j ACCEPT
>
> thanks a lot!
> rebecca
>
>
>
> _
> Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
> To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
>
> To subscribe to the Linux Newbies' List: send "subscribe" in the body to
>[EMAIL PROTECTED]
>
-----------------
Ronald C. Rivera
Compass Internet
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]