problem with dns on all and squid on some.

[Edwin L. Culp]

Quoting Jon Simola <jsimola at gmail.com>:

> On 5/26/05, Edwin L. Culp <eculp at encontacto.net> wrote:
>
>> this configuration there is no dns resolution.  The first problem.
>
>> tcp_services = "{ 22, 25, 53, 80, 110, 113, 123, 143, 389 }"
>
>> block all
>> pass in on $ext_if inet proto tcp from any to ($ext_if) port
>> $tcp_services flags S/SA keep state
>
> DNS is UDP port 53, which you've blocked.

Thanks, Jon, I thought it would work with either but I added a udp line 
before the tcp line.

pass in on $ext_if inet proto udp from any to ($ext_if) port 53 keep state
pass in on $ext_if inet proto tcp from any to ($ext_if) port 
$tcp_services flags S/SA keep state

and it works.  Hmmmm......, I wonder if there is something else that I 
need to add to udp?

Thanks,

ed