hi!

try this rule:

ipchains -A input -p tcp -s 0/0 -d x.x.x.y 53 -b -j ACCEPT
ipchains -A input -p udp -s 0/0 -d x.x.x.y 53 -b -j ACCEPT

this will match packets going in both directions. 

hth,


Ronald C. Rivera
Compass Internet


On Tue, 29 May 2001, Rebecca wrote:

> 
> hi!
>     i have a dns server behind my firewall. what would be the right code
> to allow dns query from and to my dns server ? the code below seems to
> work but is there a shorter one ? :)
> 
> ipchins -A input -p tcp -s 0.0.0.0/0 -d x.x.x.y 53 -j ACCEPT
> ipchins -A input -p udp -s 0.0.0.0/0 -d x.x.x.y 53 -j ACCEPT
> ipchains -A input -p tcp -s 0.0.0.0/0 53 -d x.x.x.y -j ACCEPT
> ipchains -A input -p udp -s 0.0.0.0/0 53 -d x.x.x.y -j ACCEPT
> 
> thanks a lot!
> rebecca 
> 
> 
> 
> _
> Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
> To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
> 
> To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
>[EMAIL PROTECTED]
> 





-----------------
Ronald C. Rivera
Compass Internet

_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
[EMAIL PROTECTED]

Reply via email to