Ok, I finally got time to play with this. Ash's ports don't work for me,
here's what I found using MiamiTCPDump:
DNS lookups (from QNX) appear to be sent on succesive ports, starting at
5001 or so. (i.e. the next DNS lookup will be sent on port 5002, 5003,
5004... etc.)
1) I don't understand why DNS lookups aren't sent on port 53.
2) I don't know why QNX keeps incrementing which port it uses.
3) MiamiTCPDump shows sends but no responses on the ethernet side:
MiamiTCPDump: listening on eth0
HAL_9000.5004 > ns3.dns.rcn.net.domain: 1+ A? www.qnx.com. (29)
HAL_9000.5004 > ns3.dns.rcn.net.domain: 1+ A? www.qnx.com. (29)
HAL_9000.5004 > ns3.dns.rcn.net.domain: 1+ A? www.qnx.com. (29)
4) MiamiTCPDump shows an "unreachable" error when trying to route the
reply from the DNS server:
MiamiTCPDump: listening on ppp0
216-164-192-203.s203.tnt2.atn.pa.dialup.rcn.com.5014 >
ns3.dns.rcn.net.domain: 1+ A? www.qnx.com. (29) (ttl 63, id 38)
ns3.dns.rcn.net.domain >
216-164-192-203.s203.tnt2.atn.pa.dialup.rcn.com.5014: 1 q: www.qnx.com. 2/3/3
www.qnx.com. (178) (DF) (ttl 250, id 18061)
216-164-192-203.s203.tnt2.atn.pa.dialup.rcn.com > ns3.dns.rcn.net: icmp:
216-164-192-203.s203.tnt2.atn.pa.dialup.rcn.com udp port 5014 unreachable
(DF) (ttl 255, id 25851) ^^^^^^^^^^^^^^^^^^^^^
5) Is there anyway to configure the MiamiDx Firewall to allow this to work
properly, without completely disabling the Firewall?
(If I disable the firewall in MiamiDx, then things work fine, but I don't
want to open up access to my vulnerable Win9x machines like that.)
Thanks All.
--Rhett
>>Any DNS / Firewall experts out there?
>>I have 2 PCs routed thru my A4000 to a 56K modem to the 'net. Works
>>beautifully as long as I'm running Win95/98. But when I reboot my primary
>>PC into QNX (beta) or BeOS (Personal), DNS lookups don't work. If I go into
>>Miami and Disable the firewall, then things work again.
>>Does un*x/QNX/BeOS/etc do something weird with the DNS lookups that MiamiDX
>>doesn't expect? This seems weird to me -- I haven't spent a lot of time
>>tracking it down yet, but I would think that a DNS lookup would work the
>>same regardless of platform. Anyway, I assume that I need to manually
>>configure MiamiDX's firewall. Any particular pointers or gotchas I should
>>watch for?
>>Thanks in advance.
>> --Rhett
>>(P.S. I share files w/ Samba too, but I don't think that should matter.)
>It's the firewal and ephemeral ports. What works for me is to add
>accept tcp (blank) 48000/65535 and
>accept udp (blank) 48000/65535
>to the firewall settings in MiamiDx. Oh and set the firewall to auto.
> -ash
> for assistance dial MYCROFTXXX
-----------------------------------------------------------------------------
Rhett R. Rodewald
Have you written your own real-time OS lately???
Life is like an analogy.
--
To unsubscribe send "unsubscribe miami-talk-ml" to
"[EMAIL PROTECTED]". For help on list commands send "help" to
"[EMAIL PROTECTED]".
