allowing LAN the direct access to outside DNS with ipfw

2004-07-13 Thread Mikhail Teterin
Hello! I'm using the `simple' template in /etc/rc.firewall to allow LAN to access the Internet from behind the firewall (FreeBSD-stable). There is a rule there: # Allow DNS queries out in the world ${fwcmd} add pass udp from any to any 53 keep-state and, indeed, the firewall

Re: allowing LAN the direct access to outside DNS with ipfw

2004-07-13 Thread Barney Wolff
On Tue, Jul 13, 2004 at 11:55:36AM -0400, Mikhail Teterin wrote: I'm using the `simple' template in /etc/rc.firewall to allow LAN to access the Internet from behind the firewall (FreeBSD-stable). There is a rule there: # Allow DNS queries out in the world ${fwcmd} add pass

Re: allowing LAN the direct access to outside DNS with ipfw

2004-07-13 Thread Roman Kurakin
Barney Wolff wrote: On Tue, Jul 13, 2004 at 11:55:36AM -0400, Mikhail Teterin wrote: I'm using the `simple' template in /etc/rc.firewall to allow LAN to access the Internet from behind the firewall (FreeBSD-stable). There is a rule there: # Allow DNS queries out in the world ${fwcmd}

Re: DNS and ipfw

2003-03-01 Thread Bill Moran
Mark wrote: This is really wonky! I've tried all sorts of variations on the following rules: add pass tcp from any 53 to 10.0.0.0/24 add pass udp from any 53 to 10.0.0.0/24 add pass tcp from 10.0.0.0/24 to any 53 add pass udp from 10.0.0.0/24 to any 53 I'm

Re: DNS and ipfw

2003-03-01 Thread Mark
On Sat, 2003-03-01 at 07:17, Bill Moran wrote: Mark wrote: This is really wonky! I've tried all sorts of variations on the following rules: add pass tcp from any 53 to 10.0.0.0/24 add pass udp from any 53 to 10.0.0.0/24 add pass tcp from 10.0.0.0/24 to any 53

DNS and ipfw

2003-02-28 Thread Mark
Hello! I'm having a real bear of a time getting my ipfw and natd working on FreeBSD 4.7. I've set up everything for gateway operations, ipfw, and natd, and have set up the firewall, and configured the addresses in /etc/rc.firewall. However If I every try to use

Re: DNS and ipfw

2003-02-28 Thread Mark
This is really wonky! I've tried all sorts of variations on the following rules: add pass tcp from any 53 to 10.0.0.0/24 add pass udp from any 53 to 10.0.0.0/24 add pass tcp from 10.0.0.0/24 to any 53 add pass udp from 10.0.0.0/24 to any 53 Any