Hi folks, I'm putting together a recursive DNS resolver for my internal clients. The resolver has both an internal and an external interface, so it doesn't have to send the outgoing DNS queries through the firewall. I'm working on the IPTables rules for the external interface, and had a question come up that I wasn't sure about. Does netfilter/iptables keep up with "connections" in UDP, even though UDP is connectionless? ie - How does it assure that it only accepts responses from the IP that it sent the query to? I saw a posting from Jan back about 3 years ago that said that as long as the response came back within ~30 seconds then netfilter would allow the response in. Is that still the case? If so, do I need any rules on the external interface other than the rules to allow the outgoing query (tcp and udp) and an "established,related" rule? Thanks for any help, Dave Doster -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
