Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 9 Aug 2008 12:47:56 +0200
From:      "Redd Vinylene" <reddvinylene@gmail.com>
To:        questions@freebsd.org
Subject:   Re: BIND won't resolve my IPs (not upstream or something?)
Message-ID:  <f1019d520808090347q473c5f99t3dee12d947597c26@mail.gmail.com>
In-Reply-To: <f1019d520808090341m449a5b3fi7e0d6d2743b5efd@mail.gmail.com>
References:  <f1019d520808090341m449a5b3fi7e0d6d2743b5efd@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Maybe mother's /etc/pf.conf could also be of relevance?

-

camel="80.252.2.3"

box="80.252.2.4"

ext_if="rl0"

set block-policy return

set skip on { lo0 }

scrub in

pass out keep state

block in

pass in on $ext_if inet proto tcp from any to any port { 22 } keep state

pass in on $ext_if inet proto tcp from any to $camel port { 25, 80,
110 } keep state

pass in on $ext_if inet proto udp from any to $camel port 53 keep state

pass in on $ext_if inet proto tcp from any to $box port { 113,
6000:9999 } keep state

pass in on $ext_if inet proto icmp from any to any keep state

-

Thanks.

On Sat, Aug 9, 2008 at 12:41 PM, Redd Vinylene <reddvinylene@gmail.com> wrote:
> I got this FreeBSD server called mother (80.252.2.2). On it, I've made
> two jails, camel (80.252.2.3) and box (80.252.2.4 through to
> 80.252.2.127). The problem is that reverse lookups for any of the IPs
> preceding .4 on box fails. If I connect to IRC with .5 for instance,
> it times out and reverts back to .4, whose lookup works just fine.
> BIND runs on camel. Maybe the problem is that BIND is not upstream for
> all those IPs? (I don't know what that means, a friend just told me)
> Or that I haven't configured the reverse for any of the other IPs? I
> would really like to keep BIND running on camel, as its dedicated to
> all my vital network services, whereas box is the home of all my
> users, and thus expendable ;) Is there any way to modify BIND on
> camel, or must I set up an additional one on box? My (hopefully)
> relevant configuration files can be found here --
> http://pastie.org/250469 -- much obliged, and thanks!
>
> --
> http://www.home.no/reddvinylene
>



-- 
http://www.home.no/reddvinylene



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?f1019d520808090347q473c5f99t3dee12d947597c26>