From: Mattia Martinello <mattia@mattiamartinello.com>
To: netfilter@lists.netfilter.org
Subject: DNS
Date: Mon, 13 Jan 2003 12:52:35 +0100 [thread overview]
Message-ID: <3E22A883.103@mattiamartinello.com> (raw)
Hi all
I wish to open DNS connections and redirect it from the gateway and the
server on the DMZ.
I tried these rules:
iptables -t nat -A PREROUTING -p tcp -i ppp0 -d [public IP] --dport 53
-j DNAT --to [private IP]:53
iptables -A FORWARD -i ppp0 -d [private IP] -p tcp --dport 53 -j ACCEPT
iptables -t nat -A PREROUTING -p udp -i ppp0 -d [public IP] --dport 53
-j DNAT --to [private IP]:53
iptables -A FORWARD -i ppp0 -d [private IP] -p tcp --dport 53 -j ACCEPT
But if I try to query my DNS server from the Internet my query goes in
timeout.
The connections between [private IP] and the Internet are allowed (all
other services work good without any problem, the only service that gets
me some problems is DNS).
What have I to open to allow DNS connections from the gateway and the DMZ?
Thank you very much
Bye
Mattia
next reply other threads:[~2003-01-13 11:52 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-01-13 11:52 Mattia Martinello [this message]
2003-01-13 16:10 ` unsubscribe telefon jackfritt@boh.de Jörg Esser
2003-01-13 22:21 ` DNS Peter Johnson
2003-01-13 22:30 ` DNS Joel Newkirk
2003-01-15 8:13 ` unsubscribe telefon jackfritt@boh.de Jörg Esser
2003-02-12 9:06 ` DNS Tarek W.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3E22A883.103@mattiamartinello.com \
--to=mattia@mattiamartinello.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox