On 2005-05-10 05:09, Fafa Hafiz Krantz <[EMAIL PROTECTED]> wrote: >> It's a question of letting DNS traffic _in_ to your nameserver: >> >> pass in on $ext_if inet proto { tcp, udp } \ >> from any to ($ext_if) port 53 >> >> ^^^ that lets the traffic in.... >> >> pass out on $ext_if inet proto { tcp, udp } \ >> from ($ext_if) port 53 to any >> >> ^^^ and that lets it back out. >> >> If you add the "query-source address * port 53;" to your named.conf >> "options" section, that'll suffice; additionally, since your DNS >> query source port is then predictable, you can drop it from the DNS >> and NTP rule. > > Hello again, Jan! > > Well, I tried applying what you said now as well as last time you > said it -- but the problem is still there. Unless I uncomment the default > deny policy nothing seems to work. The problem must lie elsewhere in my > ruleset:
Show us the output of: # pfctl -sr [snip ruleset] _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"