From mboxrd@z Thu Jan  1 00:00:00 1970
From: "Francois Peyron" <lists@peyron.nom.fr>
Subject: Re: dns server
Date: Thu, 6 Jun 2002 15:31:17 +0200
Sender: netfilter-admin@lists.samba.org
Message-ID: <007501c20d5e$7ddfefb0$d700677d@7jbkbszj019>
References: <1420507267.20020606152231@gmx.de>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Return-path: <netfilter-admin@lists.samba.org>
Errors-To: netfilter-admin@lists.samba.org
List-Help: <mailto:netfilter-request@lists.samba.org?subject=help>
List-Post: <mailto:netfilter@lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/netfilter>,
	<mailto:netfilter-request@lists.samba.org?subject=subscribe>
List-Id: <netfilter.vger.kernel.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/netfilter>,
	<mailto:netfilter-request@lists.samba.org?subject=unsubscribe>
List-Archive: <http://lists.samba.org/pipermail/netfilter/>
Content-Type: text/plain; charset="us-ascii"
To: netfilter@lists.samba.org

Hi,

I think you have to add the same line for the tcp protocol, I can't remember
why: I think some requests are made with udp while others with tcp.
iptables -A INPUT -p tcp --destination-port 53 -j ACCEPT

hope this will help,

Francois
----- Original Message -----
From: "Corin Langosch" <corinl@gmx.de>
To: "IP-Tables Maillingliste" <netfilter@lists.samba.org>
Sent: Thursday, June 06, 2002 3:22 PM
Subject: dns server


> Hi,
>
> im running a dns server here and i'm not sure if the following rule is
enough to
> allow dns queries from everywhere:
>
> $IPTABLES -A INPUT -p udp --destination-port 53 -j ACCEPT
>
> all other packets are reject or dropped.
>
> Thanks,
> Corin
>
>