Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 May 2005 14:17:32 -0700
From:      Jon Simola <jsimola@gmail.com>
To:        "Edwin L. Culp" <eculp@encontacto.net>
Cc:        pf@freebsd.org
Subject:   Re: problem with dns on all and squid on some.
Message-ID:  <8eea040805052614177ca5e3d9@mail.gmail.com>
In-Reply-To: <20050526161315.4997ejvpxwswowsc@mail.encontacto.net>
References:  <20050526161315.4997ejvpxwswowsc@mail.encontacto.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On 5/26/05, Edwin L. Culp <eculp@encontacto.net> wrote:

> this configuration there is no dns resolution.  The first problem.

> tcp_services =3D "{ 22, 25, 53, 80, 110, 113, 123, 143, 389 }"

> block all
> pass in on $ext_if inet proto tcp from any to ($ext_if) port
> $tcp_services flags S/SA keep state

DNS is UDP port 53, which you've blocked.=20

--=20
Jon Simola
Systems Administrator
ABC Communications



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8eea040805052614177ca5e3d9>