On Sat, Jul 26, 2008 at 09:24:23AM -0500, Theo Wiegmann wrote:
> Tom Eastep wrote:
> >> DNS/ACCEPT $FW net
> >> DNS/ACCEPT loc $FW
> >
> >Those rules are not affected by the recent bind upgrade.
> 
> Thanks, Tom.  That let me approach the problem from a different
> perspective.  I figured out what I was doing wrong: I needed to remove
> an entry from the named.conf file:
> 
> query-source port 53;
> 
> Now, all queries are using randomized ports!
> 
Are you using Debian?  A while back that directive was the default in
Debian's BIND configuration.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

Attachment: signature.asc
Description: Digital signature

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to