Hi,
I've been noticing lots of errors in my /var/log/messages reporting named errors:
May 18 06:45:14 enertia1 named[8320]: client 204.9.110.133#1829: error sending response: permission denied
May 18 06:45:14 enertia1 named[8320]: client 204.9.110.133#1993: error sending response: permission denied
May 18 06:45:19 enertia1 named[8320]: client 204.9.110.132#3123: error sending response: permission denied
May 18 06:45:22 enertia1 named[8320]: client 204.9.110.143#61370: error sending response: permission denied
May 18 06:46:21 enertia1 named[8320]: client 204.9.110.133#3529: error sending response: permission denied
I also noticed these errors in my ipfw.log file:
May 18 06:40:03 enertia1 /kernel: ipfw: 65000 Deny UDP 63.252.160.219:53 204.9.110.134:3371 in via vlan1
May 18 06:40:03 enertia1 /kernel: ipfw: 65000 Deny UDP 63.252.160.219:53 204.9.110.134:1420 in via vlan1
May 18 06:40:03 enertia1 /kernel: ipfw: 65000 Deny UDP 63.252.160.219:53 204.9.110.134:2961 in via vlan1
May 18 06:40:03 enertia1 /kernel: ipfw: 65000 Deny UDP 63.252.160.219:53 204.9.110.134:4701 in via vlan1
For some reason, it seems like ipfw is kaboshing some of the dns queries going thru the server. Queries seem to work as far as I can tell, but randomly I get the above error messags. I believe this is a fairly heavily loaded dns server amongst other services.
Here are my ipfw rules for the dns:
/etc/rc.firewall.rules
fwcmd="/sbin/ipfw -q"
ip2=204.9.110.134
${fwcmd} add pass tcp from any to ${ip2} 53 setup
${fwcmd} add pass udp from any to ${ip2} 53 keep-stateI'm suspecting I'm hitting some sort of tunable (hopefully) ipfw limit. Can anyone provide me some insight on this... I'm not having much look with google or looking in the list archives.
This is on a FreeBSD 4.11 system.
Thank you, Stephane _______________________________________________ freebsd-ipfw@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To unsubscribe, send any mail to "[EMAIL PROTECTED]"
