problem with dns on all and squid on some.

Thu May 26 14:20:29 PDT 2005

On 2005.05.26 14:17:32 -0700, Jon Simola wrote:
> On 5/26/05, Edwin L. Culp <eculp at encontacto.net> wrote:
> 
> > this configuration there is no dns resolution.  The first problem.
> 
> > tcp_services = "{ 22, 25, 53, 80, 110, 113, 123, 143, 389 }"
> 
> > block all
> > pass in on $ext_if inet proto tcp from any to ($ext_if) port
> > $tcp_services flags S/SA keep state
> 
> DNS is UDP port 53, which you've blocked. 

Well, more accurately... it's TCP and UDP, both port 53, though it
uses UDP most of the time.

-- 
Simon L. Nielsen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20050526/1e9010e0/attachment.bin