From owner-freebsd-pf@FreeBSD.ORG  Thu May 26 21:17:33 2005
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: pf@freebsd.org
Delivered-To: freebsd-pf@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B9E4716A41C
	for <pf@freebsd.org>; Thu, 26 May 2005 21:17:33 +0000 (GMT)
	(envelope-from jsimola@gmail.com)
Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.205])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 617C143D4C
	for <pf@freebsd.org>; Thu, 26 May 2005 21:17:33 +0000 (GMT)
	(envelope-from jsimola@gmail.com)
Received: by wproxy.gmail.com with SMTP id 36so2182027wra
	for <pf@freebsd.org>; Thu, 26 May 2005 14:17:32 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=areGm6Kmxz/V5Bm+PxAnQ+pq0B2chUsU3tNRARm+CFLekawf7UgQMtSsM2jHEsHj786YeljSJsk242tTso+/ngDv0ny/pjuuWxBRRKhPicA8DYNWPWF+Rvw66Rt+oLU+U3iztVqfEd4jjnm8yX+2xklpmdS1SCf6YKf5JzB7l34=
Received: by 10.54.8.8 with SMTP id 8mr2121518wrh;
	Thu, 26 May 2005 14:17:32 -0700 (PDT)
Received: by 10.54.39.65 with HTTP; Thu, 26 May 2005 14:17:32 -0700 (PDT)
Message-ID: <8eea040805052614177ca5e3d9@mail.gmail.com>
Date: Thu, 26 May 2005 14:17:32 -0700
From: Jon Simola <jsimola@gmail.com>
To: "Edwin L. Culp" <eculp@encontacto.net>
In-Reply-To: <20050526161315.4997ejvpxwswowsc@mail.encontacto.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <20050526161315.4997ejvpxwswowsc@mail.encontacto.net>
Cc: pf@freebsd.org
Subject: Re: problem with dns on all and squid on some.
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: jon@abccomm.com
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 26 May 2005 21:17:33 -0000

On 5/26/05, Edwin L. Culp <eculp@encontacto.net> wrote:

> this configuration there is no dns resolution.  The first problem.

> tcp_services =3D "{ 22, 25, 53, 80, 110, 113, 123, 143, 389 }"

> block all
> pass in on $ext_if inet proto tcp from any to ($ext_if) port
> $tcp_services flags S/SA keep state

DNS is UDP port 53, which you've blocked.=20

--=20
Jon Simola
Systems Administrator
ABC Communications