Tightening up outgoing traffic

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

>
> I keep getting "domainname can not be found.  Please check the name and
> try again" from my browser.  This only happens for new web sites (i.e.,
> Yahoo works fine).  As this seems somewhat like a DNS issue, I tried
> adding this:
>

That'll be a DNS problem ;-)

> iptables -A OUTPUT -p tcp --destination-port nameserver -j ACCEPT
>
> but it didn't work.  Any ideas?  Thanks.

iptables -A OUTPUT -p tcp --dport domain -j ACCEPT
iptables -A OUTPUT -p udp --dport domain -j ACCEPT

You want to use the service name "domain", not "nameserver", also I think
domain lookups use the udp protocol also. (Don't quote me on that one :-)

Dan...





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux