Help - Search - Members - Calendar
Full Version: IPTables
The Planet Forums > System Administration > DNS Hosting
Homer
Ok i have found out whats causing DNS entries to be blocked. Iptables is doing it.

How can i stop this thing from blocking DNS? I have it stopped right now, and i have a cron running hourly to keep it stopped until i have fixed it.

Thanks wink.gif
chirpy
You need to ensure that you allow both UDP and TCP connections to and from port 53 on the server.
Homer
QUOTE (chirpy)
You need to ensure that you allow both UDP and TCP connections to and from port 53 on the server.


Aye i know that much, just need to know how to do it >.<
Homer
*sigh*

Bump.
OCX
you can type

iptables --h

for info on how to use iptables
sean1121
QUOTE (chirpy)
You need to ensure that you allow both UDP and TCP connections to and from port 53 on the server.

Only 53/udp needs to be open for DNS queries, 53/tcp is used for zone transfers.

QUOTE (Homer)
Aye i know that much, just need to know how to do it >.<


If you want a quick fix you could try:

iptables -I INPUT 1 -p udp --dport 53 -j ACCEPT

This will allow inbound connections on port 53/udp, change the udp to tcp if you want to allow zone tranfers. I would only allow 53/tcp to your slave servers, otherwise anyone can do a zone transfer unless you've locked down your DNS config.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.